Installation Guide
Page 1
Check Point IP690 Security Platform Installation Guide Part No. N450000890 Rev 001 Published March 2009
Check Point IP690 Security Platform Installation Guide Part No. N450000890 Rev 001 Published March 2009
Installation Guide
Page 2
... or related documentation may be reproduced in any means without notice. This product and related documentation are subject to : [email protected] 2 Check Point IP690 Security Platform Installation Guide © 2003-2009 Check Point Software Technologies Ltd. All rights reserved. Please help us by copyright and distributed under licensing restricting their use, copying...
... or related documentation may be reproduced in any means without notice. This product and related documentation are subject to : [email protected] 2 Check Point IP690 Security Platform Installation Guide © 2003-2009 Check Point Software Technologies Ltd. All rights reserved. Please help us by copyright and distributed under licensing restricting their use, copying...
Installation Guide
Page 3
... Information 2 About this Guide 11 In this Guide 11 Conventions this Guide Uses 12 Notices 12 Command-Line Conventions 12 Text Conventions 14 1 Overview 15 About the Check Point IP690 Security Platform 15 Managing the Check Point IP690 Security Platform 16 Check Point IP690 Security Platform Overview 17 ... Supplies 22 Fan Unit 23 Site Requirements, Warnings, and Cautions 24 Software Requirements 24 Product Disposal 25 2 Installing the Check Point IP690 Appliance 27 Before You Begin 27 Rack-Mounting the Appliance 27 Check Point IP690 Security Platform Installation Guide 3
... Information 2 About this Guide 11 In this Guide 11 Conventions this Guide Uses 12 Notices 12 Command-Line Conventions 12 Text Conventions 14 1 Overview 15 About the Check Point IP690 Security Platform 15 Managing the Check Point IP690 Security Platform 16 Check Point IP690 Security Platform Overview 17 ... Supplies 22 Fan Unit 23 Site Requirements, Warnings, and Cautions 24 Software Requirements 24 Product Disposal 25 2 Installing the Check Point IP690 Appliance 27 Before You Begin 27 Rack-Mounting the Appliance 27 Check Point IP690 Security Platform Installation Guide 3
Installation Guide
Page 4
... Interfaces 67 Effect on Interfaces 67 Check Point ADP Module Interface Names for IP690 Appliances 68 Configuring Network Topology with an IP690 Appliance 68 Configuration Example with VRRP 69 Deleting VRRP Configurations 70 Reconfiguring Interfaces 71 Reconfiguring VRRP 74 7 Installing and Replacing Components Other than Network Interface Cards (NICs) 4 Check Point IP690 Security Platform Installation Guide
... Interfaces 67 Effect on Interfaces 67 Check Point ADP Module Interface Names for IP690 Appliances 68 Configuring Network Topology with an IP690 Appliance 68 Configuration Example with VRRP 69 Deleting VRRP Configurations 70 Reconfiguring Interfaces 71 Reconfiguring VRRP 74 7 Installing and Replacing Components Other than Network Interface Cards (NICs) 4 Check Point IP690 Security Platform Installation Guide
Installation Guide
Page 5
... Data Path (ADP) Services Modules 77 Replacing the Compact Flash Memory Card 78 Installing and Using a PC Card 81 Installing a Hard-Disk Drive 82 Before You Begin 82 Replacing ...IP690 Appliance Power Supply 94 Replacing the Battery 95 8 Troubleshooting 99 General Troubleshooting Information 99 Troubleshooting Routing Problems 106 A Technical Specifications 109 Space Requirements 109 Other Specifications 109 B Compliance Information 111 Declaration of Conformity 111 Compliance Statements 113 FCC Notice (US 113 Index 115 Check Point IP690 Security Platform Installation Guide...
... Data Path (ADP) Services Modules 77 Replacing the Compact Flash Memory Card 78 Installing and Using a PC Card 81 Installing a Hard-Disk Drive 82 Before You Begin 82 Replacing ...IP690 Appliance Power Supply 94 Replacing the Battery 95 8 Troubleshooting 99 General Troubleshooting Information 99 Troubleshooting Routing Problems 106 A Technical Specifications 109 Space Requirements 109 Other Specifications 109 B Compliance Information 111 Declaration of Conformity 111 Compliance Statements 113 FCC Notice (US 113 Index 115 Check Point IP690 Security Platform Installation Guide...
Installation Guide
Page 7
Figures Figure 1 Component Locations Front View 17 Figure 2 Four-Port 10/100/1000 Ethernet PMC Details 17 Figure 3 Check Point IP690 Security Platform System Status LEDs 20 Figure 4 Location of the PMC PC Card Carrier Slot 21 Figure 5 Power Supplies and Fan Unit Locations 22 ...NIC 54 Figure 19 PMC Two-Port Long-Range Gigabit Ethernet NIC 54 Figure 20 Compact Flash Memory Card Slot 78 Figure 21 External PC Card Location 81 Figure 22 Location of Hard-Disk Drive on Chassis Tray Assembly 84 Figure 23 Power Supply Locations 93 Check Point IP690 Security Platform Installation Guide 7
Figures Figure 1 Component Locations Front View 17 Figure 2 Four-Port 10/100/1000 Ethernet PMC Details 17 Figure 3 Check Point IP690 Security Platform System Status LEDs 20 Figure 4 Location of the PMC PC Card Carrier Slot 21 Figure 5 Power Supplies and Fan Unit Locations 22 ...NIC 54 Figure 19 PMC Two-Port Long-Range Gigabit Ethernet NIC 54 Figure 20 Compact Flash Memory Card Slot 78 Figure 21 External PC Card Location 81 Figure 22 Location of Hard-Disk Drive on Chassis Tray Assembly 84 Figure 23 Power Supply Locations 93 Check Point IP690 Security Platform Installation Guide 7
Installation Guide
Page 9
Tables Table 1 Command-Line Conventions 12 Table 2 Text Conventions 14 Table 3 Pin Assignments for Console Connector and Console Cable 18 Table 4 System Status LEDs 20 Table 5 Power Supply Status LEDs 23 Table 6 NIC PCI Frequency 47 Check Point IP690 Security Platform Installation Guide 9
Tables Table 1 Command-Line Conventions 12 Table 2 Text Conventions 14 Table 3 Pin Assignments for Console Connector and Console Cable 18 Table 4 System Status LEDs 20 Table 5 Power Supply Status LEDs 23 Table 6 NIC PCI Frequency 47 Check Point IP690 Security Platform Installation Guide 9
Installation Guide
Page 11
... flash memory card, PC card, and the Check Point encryption accelerator card. „ Chapter 8, "Troubleshooting" discusses problems you might encounter and proposes solutions to install and use each of the Check Point IP690 security platforms. Installation and maintenance should be performed by experienced technicians or Check Point-approved service providers only. About this Guide This guide...
... flash memory card, PC card, and the Check Point encryption accelerator card. „ Chapter 8, "Troubleshooting" discusses problems you might encounter and proposes solutions to install and use each of the Check Point IP690 security platforms. Installation and maintenance should be performed by experienced technicians or Check Point-approved service providers only. About this Guide This guide...
Installation Guide
Page 12
... conventions, and command-line conventions. You must supply. For example: delete interface nic1 12 Check Point IP690 Security Platform Installation Guide Command-Line Conventions Table 1 describes the elements of special interest or recommendations. Table 1 Command-Line Conventions... variable in Check Point business security products. „ Appendix B, "Compliance Information" provides compliance and regulatory information. Conventions this Guide Uses The following elements on a command-line path. Notices Warning Warnings advise the user that either bodily injury might occur because ...
... conventions, and command-line conventions. You must supply. For example: delete interface nic1 12 Check Point IP690 Security Platform Installation Guide Command-Line Conventions Table 1 describes the elements of special interest or recommendations. Table 1 Command-Line Conventions... variable in Check Point business security products. „ Appendix B, "Compliance Information" provides compliance and regulatory information. Conventions this Guide Uses The following elements on a command-line path. Notices Warning Warnings advise the user that either bodily injury might occur because ...
Installation Guide
Page 13
delete [slot slot_num] For example: delete slot 3 Vertical bars, also called a Separates alternative, mutually exclusive elements. Check Point IP690 Security Platform Installation Guide 13 Conventions this extension exactly as shown. The extension might follow a variable that represents a filename. For example: framing sonet or framing sdh A flag is usually ...
delete [slot slot_num] For example: delete slot 3 Vertical bars, also called a Separates alternative, mutually exclusive elements. Check Point IP690 Security Platform Installation Guide 13 Conventions this extension exactly as shown. The extension might follow a variable that represents a filename. For example: framing sonet or framing sdh A flag is usually ...
Installation Guide
Page 14
...simultaneously are linked by a greater than sign (>): Choose File > Open. 1 Text Conventions Table 2 describes the text conventions this guide uses. Do not press the Return or Enter key when an instruction says type. • Emphasizes a point or denotes new ...8226; Indicates an external book title reference. • Indicates a variable in a command: delete interface if_name 14 Check Point IP690 Security Platform Installation Guide Table 2 Text Conventions Convention Description monospace font Indicates command syntax, or represents computer or screen output, for example: Log error...
...simultaneously are linked by a greater than sign (>): Choose File > Open. 1 Text Conventions Table 2 describes the text conventions this guide uses. Do not press the Return or Enter key when an instruction says type. • Emphasizes a point or denotes new ...8226; Indicates an external book title reference. • Indicates a variable in a command: delete interface if_name 14 Check Point IP690 Security Platform Installation Guide Table 2 Text Conventions Convention Description monospace font Indicates command syntax, or represents computer or screen output, for example: Log error...
Installation Guide
Page 15
... IP690 Security Platform Installation Guide 15 The IP690 is ideally suited for the enterprise data center. In its use. 1 Overview This chapter provides an overview of the Check Point IP690 security platform and the requirements for its base configuration, the IP690 consists of: „ Solid state IDE compact flash ... of the Check Point IPSO for IP appliances operating system with the Check Point VPN-1/FW-1 firewall application. The Check Point IP690 security platform is a high-end, multi-port security platform that is a one rack-unit appliance that incorporates a serviceable slide...
... IP690 Security Platform Installation Guide 15 The IP690 is ideally suited for the enterprise data center. In its use. 1 Overview This chapter provides an overview of the Check Point IP690 security platform and the requirements for its base configuration, the IP690 consists of: „ Solid state IDE compact flash ... of the Check Point IPSO for IP appliances operating system with the Check Point VPN-1/FW-1 firewall application. The Check Point IP690 security platform is a high-end, multi-port security platform that is a one rack-unit appliance that incorporates a serviceable slide...
Installation Guide
Page 16
.... Horizon Manager can perform installations and upgrades on the IP690 security platform and enabled through the Check Point IPSO operating system. to high-end availability requirements, including port density for IP appliances-a secure GUI-based software image management application....SSL-secured, Web-based element management interface to obtain Horizon Manager, contact the Check Point Support Center at http://support.checkpoint.com/. 16 Check Point IP690 Security Platform Installation Guide Managing the Check Point IP690 Security Platform You can manage the IP690 security platform by...
.... Horizon Manager can perform installations and upgrades on the IP690 security platform and enabled through the Check Point IPSO operating system. to high-end availability requirements, including port density for IP appliances-a secure GUI-based software image management application....SSL-secured, Web-based element management interface to obtain Horizon Manager, contact the Check Point Support Center at http://support.checkpoint.com/. 16 Check Point IP690 Security Platform Installation Guide Managing the Check Point IP690 Security Platform You can manage the IP690 security platform by...
Installation Guide
Page 17
... slots (slots 1 and 2) PC-card slot (slot 3) SLOT 1 SLOT 2 CONSOLE RESET AUX SLOT 3 SLOT 4 1 2 3 4 IP690 00577 Console port AUX port Reset button Four-port Ethernet 10/100/1000 (slot 4) Four-Port 10/100/1000 Ethernet NIC The four-port 10.../100/1000 Mbps Ethernet ports are intended for the IP690. The remaining LEDs represent the remaining ports from top to bottom and left -most port (port 1). Figure 2 shows...with IEEE 802.3ab, Cat 5E, or Cat 5 cables to right. Check Point IP690 Security Platform Installation Guide 17
... slots (slots 1 and 2) PC-card slot (slot 3) SLOT 1 SLOT 2 CONSOLE RESET AUX SLOT 3 SLOT 4 1 2 3 4 IP690 00577 Console port AUX port Reset button Four-port Ethernet 10/100/1000 (slot 4) Four-Port 10/100/1000 Ethernet NIC The four-port 10.../100/1000 Mbps Ethernet ports are intended for the IP690. The remaining LEDs represent the remaining ports from top to bottom and left -most port (port 1). Figure 2 shows...with IEEE 802.3ab, Cat 5E, or Cat 5 cables to right. Check Point IP690 Security Platform Installation Guide 17
Installation Guide
Page 18
... for network interface card (NIC) and Accelerated Data Path (ADP) services modules options. 1 Overview PMC Expansion Slots The IP690 security platform provides two additional PMC expansion slots for console connections. For sales or reseller information, contact the Check Point Support...." Console Port The default configuration of two parts: „ A 6' rollover cable with RJ-45 terminations 18 Check Point IP690 Security Platform Installation Guide Table 3 Pin Assignments for Check Point products that use the console port. The Check Point support services group can only provide...
... for network interface card (NIC) and Accelerated Data Path (ADP) services modules options. 1 Overview PMC Expansion Slots The IP690 security platform provides two additional PMC expansion slots for console connections. For sales or reseller information, contact the Check Point Support...." Console Port The default configuration of two parts: „ A 6' rollover cable with RJ-45 terminations 18 Check Point IP690 Security Platform Installation Guide Table 3 Pin Assignments for Check Point products that use the console port. The Check Point support services group can only provide...
Installation Guide
Page 19
... the Radicom model V92MB-U-E, and you can then connect to the DB-9 adapter, which you must be using IPSO 6.1 or greater. Check Point IP690 Security Platform Installation Guide 19 Auxiliary Port Use the built-in serial (AUX) port, shown in Figure 3. You can visually monitor the status of the... IP690 security platform by pulling back on the center of the front panel, as shown in Figure 1, to DB-9 adapter One RJ-45 termination has...
... the Radicom model V92MB-U-E, and you can then connect to the DB-9 adapter, which you must be using IPSO 6.1 or greater. Check Point IP690 Security Platform Installation Guide 19 Auxiliary Port Use the built-in serial (AUX) port, shown in Figure 3. You can visually monitor the status of the... IP690 security platform by pulling back on the center of the front panel, as shown in Figure 1, to DB-9 adapter One RJ-45 termination has...
Installation Guide
Page 20
...internal voltage problem. ! Solid red Blinking green One or more fans are visible only if there is described in Chapter 6, "Installing, Using, and Replacing ADP Services Modules." 1 Overview Figure 3 Check Point IP690 Security Platform System Status LEDs Warning (yellow) System OK (green) Fault (red) SLOT 2 CONSOLE RESET AUX SLOT 3 ... describes their meaning. Power supply over temperature fault. The location and definition of the status LEDs for the installed ADP modules is an alarm condition, as specified. 20 Check Point IP690 Security Platform Installation Guide
...internal voltage problem. ! Solid red Blinking green One or more fans are visible only if there is described in Chapter 6, "Installing, Using, and Replacing ADP Services Modules." 1 Overview Figure 3 Check Point IP690 Security Platform System Status LEDs Warning (yellow) System OK (green) Fault (red) SLOT 2 CONSOLE RESET AUX SLOT 3 ... describes their meaning. Power supply over temperature fault. The location and definition of the status LEDs for the installed ADP modules is an alarm condition, as specified. 20 Check Point IP690 Security Platform Installation Guide
Installation Guide
Page 21
...appliance, as Figure 4 shows. You can support an optional PC card with 1 GB flash memory. Using Hard-Disk Drives for Logging The IP690 security platform is either a flash-based or disk-based appliance, and the appliance also supports one or two optional hard-disk drives that plug into...for Logging Note You can use the PC card flash memory to store local system logs. The IP690 supports using only one should be plugged into connectors on page 82. Figure 4 Location of Check Point IP690 Security Platform Installation Guide 21 For more information, contact the appropriate Check ...
...appliance, as Figure 4 shows. You can support an optional PC card with 1 GB flash memory. Using Hard-Disk Drives for Logging The IP690 security platform is either a flash-based or disk-based appliance, and the appliance also supports one or two optional hard-disk drives that plug into...for Logging Note You can use the PC card flash memory to store local system logs. The IP690 supports using only one should be plugged into connectors on page 82. Figure 4 Location of Check Point IP690 Security Platform Installation Guide 21 For more information, contact the appropriate Check ...
Installation Guide
Page 22
...Power supply switches For information about how to install or remove and replace a failed power supply, see the Check Point Support Center at the rear of the power supply as shown in Table 5. 22 Check Point IP690 Security Platform Installation Guide The power supply status LEDs provide the ...status of the IP690 appliance, as described in Figure 5. Power Supplies and Fan Unit The redundant power supplies and fan...
...Power supply switches For information about how to install or remove and replace a failed power supply, see the Check Point Support Center at the rear of the power supply as shown in Table 5. 22 Check Point IP690 Security Platform Installation Guide The power supply status LEDs provide the ...status of the IP690 appliance, as described in Figure 5. Power Supplies and Fan Unit The redundant power supplies and fan...
Installation Guide
Page 23
Over Temp Yellow Power supply has an internal temperature problem. Fan Unit The IP690 fan is a single unit made up of the fan unit. For more information about how to the unit is functioning properly. After the internal temperature ... LEDs LED LED status Meaning Fault Red Power supply has a voltage problem and power was turned off . The system status LEDs on . Check Point IP690 Security Platform Installation Guide 23 or One power supply in a redundant system is on page 19. Figure 7 Fan Unit 00586 Caution If an individual fan fails, replace the...
Over Temp Yellow Power supply has an internal temperature problem. Fan Unit The IP690 fan is a single unit made up of the fan unit. For more information about how to the unit is functioning properly. After the internal temperature ... LEDs LED LED status Meaning Fault Red Power supply has a voltage problem and power was turned off . The system status LEDs on . Check Point IP690 Security Platform Installation Guide 23 or One power supply in a redundant system is on page 19. Figure 7 Fan Unit 00586 Caution If an individual fan fails, replace the...
