Nokia EM7500 User manual

Published April 2006
Model Number:
EM7500
Product Name:
IP390, 105i & 105s
Security Platform
Installation Guide(Preliminary)
All manuals and user guides at all-guides.com
all-guides.com

2 IP390, 105i & 105s Security Platform Installation Guide
COPYRIGHT
©2006 Nokia. All rights reserved.
Rights reserved under the copyright laws of the United States.
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the United States Government is subject to restrictions as set
forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of,
this computer software, the rights of the United States Government regarding its use,
reproduction, and disclosure are as set forth in the Commercial Computer Software-Restricted
Rights clause at FAR 52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Inc. as is and any express or implied
warranties, including, but not limited to, implied warranties of merchantability and fitness for a
particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or
suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential
damages (including, but not limited to, procurement of substitute goods or services; loss of use,
data, or profits; or business interruption) however caused and on any theory of liability, whether in
contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use
of this software, even if advised of the possibility of such damage.
Nokia reserves the right to make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document
are trademarks or registered trademarks of their respective holders.
060101
All manuals and user guides at all-guides.com

IP390, 105i & 105s Security Platform Installation Guide 3
Nokia Contact Information
Corporate Headquarters
Regional Contact Information
Nokia Customer Support
Web Site http://www.nokia.com
Telephone [phone] or
1-650-625-2000
Fax [phone]
Mail
Address Nokia Inc. 313 Fairchild Drive
Mountain View, California
94043-2215 USA
Americas Nokia Inc.
313 Fairchild Drive
Mountain View, CA 94043-2215
USA
Tel: [phone]
Outside USA and Canada: [phone]
email: info.ipnetworking_am[email protected]
Europe,
Middle East,
and Africa
Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG UK
Tel: UK: [phone]
Tel: France: [phone]
email: [e-mail]
Asia-Pacific 438B Alexandra Road
#07-00 Alexandra Technopark
Singapore 119968
Tel: [phone]
email: [e-mail]
Web Site: https://support.nokia.com/
Email: [e-mail]
Americas Europe
Voice: 1-888-361-5030 or
1-613-271-6721 Voice: [phone]
Fax: [phone] Fax: [phone]
Asia-Pacific
Voice: [phone]
Fax: [phone]
050602
All manuals and user guides at all-guides.com

4 IP390, 105i & 105s Security Platform Installation Guide
All manuals and user guides at all-guides.com

IP390, 105i & 105s Security Platform Installation Guide 5
Contents
About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
In this Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Conventions this Guide Uses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Command-Line Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
About the Nokia Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . 20
Built-In Gigabit Ethernet Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . 21
PMC Expansion Slots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
System Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Managing the Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Logging Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Using Hard-Disk Drives for Logging . . . . . . . . . . . . . . . . . . . . . . 25
Using a Flash-Memory PC Card for Logging . . . . . . . . . . . . . . . 25
Site Requirements, Warnings, and Cautions . . . . . . . . . . . . . . . . . 26
Software Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Product Disposal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
2 Installing the Nokia IP390 Appliance . . . . . . . . . . . . . . . . . . . . . 29
Before You Begin. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Rack Mounting the Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Connecting Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Connecting to the Console or Auxiliary Port. . . . . . . . . . . . . . . . . . 32
All manuals and user guides at all-guides.com

6 IP390, 105i & 105s Security Platform Installation Guide
Console Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Auxiliary Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Connecting to Network Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . 38
3 Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . 41
Using a Console Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Using Nokia Network Voyager. . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Viewing Nokia IPSO Documentation by Using Nokia Network
Voyager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Using the Command-Line Interface . . . . . . . . . . . . . . . . . . . . . . . . 47
Using Nokia Horizon Manager. . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
4 Installing and Replacing Network Interface Cards . . . . . . . . . 51
Deactivating Configured Interfaces . . . . . . . . . . . . . . . . . . . . . . . . 52
Removing, Installing, and Replacing NICs. . . . . . . . . . . . . . . . . . . 52
Before You Start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Configuring and Activating Interfaces . . . . . . . . . . . . . . . . . . . . . . 59
Monitoring Network Interface Cards. . . . . . . . . . . . . . . . . . . . . . . . 59
5 Connecting PMC Network Interface Cards . . . . . . . . . . . . . . . . 61
Four-Port 10/100 Mbps Ethernet NICs. . . . . . . . . . . . . . . . . . . . . . 61
Ethernet NIC Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Ethernet NIC Connectors and Cables. . . . . . . . . . . . . . . . . . . . . 63
Two-Port Copper Gigabit Ethernet Network Interface Card. . . . . . 65
Copper Gigabit Ethernet NIC Features. . . . . . . . . . . . . . . . . . . . 65
Copper Gigabit Ethernet Connectors and Cables. . . . . . . . . . . . 66
Two-Port Fiber-Optic Gigabit Ethernet Network Interface Card. . . 68
Fiber-Optic Gigabit Ethernet NIC Features. . . . . . . . . . . . . . . . . 68
Fiber-Optic Gigabit Ethernet Connectors and Cables. . . . . . . . . 69
6 Installing and Replacing Other Components . . . . . . . . . . . . . . 71
Replacing the Compact Flash Memory Card. . . . . . . . . . . . . . . . . 72
Installing a Flash-Memory PC Card. . . . . . . . . . . . . . . . . . . . . . . . 76
All manuals and user guides at all-guides.com
all-guides.com

IP390, 105i & 105s Security Platform Installation Guide 7
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Transferring Files with the Flash-Memory PC Card . . . . . . . . . . 77
Installing or Replacing a Hard-Disk Drive. . . . . . . . . . . . . . . . . . . . 78
Before You Start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Configuring a PC Card or Hard-Disk Drive for Logging . . . . . . . . . 84
Replacing or Upgrading Memory . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Before You Start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
7 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
General Troubleshooting Information. . . . . . . . . . . . . . . . . . . . . . . 93
Troubleshooting Routing Problems . . . . . . . . . . . . . . . . . . . . . . . 103
A Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Physical Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Space Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Operating Temperature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
NIC Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
B Compliance Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Declaration of Conformity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Compliance Statements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
FCC Notice (US) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
All manuals and user guides at all-guides.com

8 IP390, 105i & 105s Security Platform Installation Guide
All manuals and user guides at all-guides.com

IP390, 105i & 105s Security Platform Installation Guide 9
Tables
Table 1 Command-Line Conventions . . . . . . . . . . . . . . . . . . . . . 15
Table 2 Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Table 3 Specifications for the IP390 Platform . . . . . . . . . . . . . . . 20
Table 4 PMC Network Interface Card Slots . . . . . . . . . . . . . . . . 22
Table 5 System Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Table 6 Pin Assignments for Console Connector and Cable . . . 36
Table 7 Pin Assignments for AUX Connector and Modem Cable 37
All manuals and user guides at all-guides.com

10 IP390, 105i & 105s Security Platform Installation Guide
All manuals and user guides at all-guides.com

IP390, 105i & 105s Security Platform Installation Guide 11
Figures
Figure 1 Component Locations Front View . . . . . . . . . . . . . . . . . 20
Figure 2 Component Locations Rear View . . . . . . . . . . . . . . . . . 21
Figure 3 Built-In Gigabit Ethernet Ports Details . . . . . . . . . . . . . . 21
Figure 4 Appliance Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . 23
Figure 5 Location of the PCMCIA Card Slot . . . . . . . . . . . . . . . . 25
Figure 6 Mounting Screws Location . . . . . . . . . . . . . . . . . . . . . . 30
Figure 7 Adjustable Mounting Brackets . . . . . . . . . . . . . . . . . . . . 31
Figure 8 Back Panel Power Switch and Socket . . . . . . . . . . . . . 32
Figure 9 Nokia Network Voyager Reference Access Points . . . . 47
Figure 10 Four-Port Ethernet NIC Front Panel Details . . . . . . . . 62
Figure 11 Output Connector for the Ethernet Cable . . . . . . . . . . 64
Figure 12 Ethernet Crossover-Cable Pin Connections . . . . . . . . 64
Figure 13 Gigabit Ethernet Crossover Cable Pin Connections . . 65
Figure 14 Two-Port Copper Gigabit Ethernet NIC . . . . . . . . . . . . 66
Figure 15 Copper Gigabit Ethernet Cable Connector Output Pin
Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Figure 16 Gigabit Ethernet Crossover Cable Pin Connections . . 67
Figure 17 Two-Port Fiber-Optic Gigabit Ethernet NIC . . . . . . . . . 69
Figure 18 Compact Flash Memory Card Slot . . . . . . . . . . . . . . . 73
Figure 19 Hard-Disk Drive Location . . . . . . . . . . . . . . . . . . . . . . 79
Figure 20 DIMM Socket Locations . . . . . . . . . . . . . . . . . . . . . . . 87
All manuals and user guides at all-guides.com
all-guides.com

12 IP390, 105i & 105s Security Platform Installation Guide
All manuals and user guides at all-guides.com

IP390, 105i & 105s Security Platform Installation Guide 13
About this Guide
This guide describes how to install and use Nokia security appliances.
Installation and maintenance should be performed by experienced technicians
or Nokia-approved service providers only.
This preface provides the following information:
In this Guide
Conventions this Guide Uses
Related Documentation
In this Guide
This guide is organized into the following chapters and appendixes:
Chapter 1, “Overview” presents a general overview of the
appliance.
Chapter 2, “Installing the Nokia IP390 Appliance” describes how to
rack-mount the appliance and how to physically connect it to a network
and power.
Chapter 3, “Performing the Initial Configuration” describes how to make
the appliance available on the network.
Chapter 4, “Installing and Replacing Network Interface Cards” describes
how to install, monitor, and replace network interface cards (NICs).
All manuals and user guides at all-guides.com

14 IP390, 105i & 105s Security Platform Installation Guide
Chapter 5, “Connecting PMC Network Interface Cards” describes how to
connect to and use each of the supported NICs.
Chapter 6, “Installing and Replacing Other Components” describes how
to install or replace compact flash memory cards, flash-memory PC cards,
RAM memory, and a hard-disk drive.
Chapter 7, “Troubleshooting” describes problems you might encounter
and proposes solutions to these problems.
Appendix A, “Technical Specifications” provides technical specifications
such as interface characteristics.
Appendix B, “Compliance Information” provides compliance and
regulatory information.
Conventions this Guide Uses
The following sections describe the conventions this guide uses, including
notices, text conventions, and command-line conventions.
Notices
Warning
Warnings advise the user that bodily injury might occur because of a
physical hazard.
Caution
Cautions indicate potential equipment damage, equipment
malfunction, loss of performance, loss of data, or interruption of
service.
All manuals and user guides at all-guides.com

Conventions this Guide Uses
IP390, 105i & 105s Security Platform Installation Guide 15
Note
Notes provide information of special interest or recommendations.
Command-Line Conventions
You might encounter one or more of the following elements on a command-
line path.
Table 1 Command-Line Conventions
Convention Description
command This required element is usually the product name or other
short word that invokes the product or calls the compiler or
preprocessor script for a compiled Nokia product. It might
appear alone or precede one or more options. You must
spell a command exactly as shown and use lowercase
letters.
Italics Indicates a variable in a command that you must supply. For
example:
delete interface if_name
Supply an interface name in place of the variable. For
example:
delete interface nic1
angle brackets < > Indicates arguments for which you must supply a value:
retry-limit <1–100>
Supply a value. For example:
retry-limit 60
All manuals and user guides at all-guides.com

16 IP390, 105i & 105s Security Platform Installation Guide
Square brackets [ ] Indicates optional arguments.
delete [slot slot_num]
For example:
delete slot 3
-flag A flag is usually an abbreviation for a function, menu, or
option name, or for a compiler or preprocessor argument.
You must enter a flag exactly as shown, including the
preceding hyphen.
.ext A filename extension, such as .ext, might follow a variable
that represents a filename. Type this extension exactly as
shown, immediately after the name of the file. The extension
might be optional in certain products.
( . , ; + * - / ) Punctuation and mathematical notations are literal symbols
that you must enter exactly as shown.
' ' Single quotation marks are literal symbols that you must
enter as shown.
Table 1 Command-Line Conventions
Convention Description
All manuals and user guides at all-guides.com
all-guides.com

Conventions this Guide Uses
IP390, 105i & 105s Security Platform Installation Guide 17
Text Conventions
Table 2 describes the text conventions this guide uses.
Table 2 Text Conventions
Convention Description
monospace font Indicates command syntax, or represents computer or
screen output, for example:
Log error 12453
bold monospace font Indicates text you enter or type, for example:
# configure nat
Key names Keys that you press simultaneously are linked by a
plus sign (+):
Press Ctrl + Alt + Del.
Menu commands Menu commands are separated by a greater than
sign (>):
Choose File > Open.
The words enter and type Enter indicates you type something and then press
the Return or Enter key.
Do not press the Return or Enter key when an
instruction says type.
Italics •Emphasizes a point or denotes new terms at the
place where they are defined in the text.
•Indicates an external book title reference.
•Indicates a variable in a command:
delete interface if_name
All manuals and user guides at all-guides.com

18 IP390, 105i & 105s Security Platform Installation Guide
Related Documentation
You can find this guide in PDF on the Nokia support Web site (https://
support.nokia.com/) and on the Nokia IPSO operating system CD-ROM
issued with your Nokia IP390 security platform.
In addition to this guide and other documents shipped with your appliance,
documentation for this product includes the following:
Nokia Network Voyager Reference Guide for the version of Nokia IPSO
you are using
CLI Reference Guide for the version of Nokia IPSO you are using
Getting Started Guide and Release Notes for the version of Nokia IPSO
you are using
Nokia IPSO Boot Manager Reference Guide, which describes how to use
the Nokia IPSO boot manager
Clustering Configuration Guide for the version of Nokia IPSO you are
using
Nokia Network Voyager inline help
You can find the most up-to date version of the Nokia IP390 Security
Platform Installation Guide in PDF on the Nokia support site (https://
support.nokia.com). You can access inline help, the Nokia Network Voyager
Reference Guide, and the CLI Reference Guide from Nokia Network Voyager.
Check Point documentation is available from the Check Point Web site at:
http://www.checkpoint.com/
060306
All manuals and user guides at all-guides.com

IP390, 105i & 105s Security Platform Installation Guide 19
1Overview
The Nokia IP390 appliance combines the power of Nokia IPSO software with
your choice of firewall and VPN applications. These appliances are ideally
suited for growing companies and satellite offices that want high-performance
IP routing combined with the industry-leading Check Point VPN-1 enterprise
applications. The small size of the IP390 appliance makes it ideal for
installations that need to conserve space.
As network devices, these appliances support a comprehensive suite of
IP-routing functions and protocols, including RIPv1/RIPv2, IGRP, OSPF and
BGP4 for unicast traffic, and DVMRP for multicast traffic.
This chapter provides an overview of the IP390 appliance and the
requirements for using it. The following topics are covered:
About the Nokia Appliance
Managing the Appliance
Logging Options
Site Requirements, Warnings, and Cautions
Software Requirements
Product Disposal
All manuals and user guides at all-guides.com

1Overview
20 IP390, 105i & 105s Security Platform Installation Guide
About the Nokia IP390 Appliance
The IP390 is a one rack-unit appliance that incorporates a serviceable
slide-out tray into the chassis design and support for various network interface
cards (NICs).
The Nokia IPSO system is stored in solid-state IDE compact flash memory.
Table 3 shows the specifications for the appliance
The following figures show component locations for the Nokia
appliance.
Figure 1 Component Locations Front View
Table 3 Specifications for the Platform
Feature Nokia IP390
Maximum memory size 2 GB
Network interface cards
(NICs) support •Two or fewer four-port 10/100 Ethernet NICs
•Two or fewer two-port copper Gigabit Ethernet NICs
•Two or fewer two-port fiber-optic Gigabit Ethernet
NICs
00525
IP390
System status LEDs
AUX port
Console port
Four-port Gigabit Ethernet
PC-card slots
PMC NIC slots (slots 1 and 2)
unpopulated in base bundle
Reset button
All manuals and user guides at all-guides.com