Nokia IP710 Series User manual

Part Number: N450436003 Rev B
April 2004
IP700 Series Installation Guide
All manuals and user guides at all-guides.com
all-guides.com

COPYRIGHT
© 2002 Nokia Corporation. All rights reserved.
Rights reserved under the copyright laws of the United States.
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the United States Government is subject to restrictions as set forth in subparagraph
(c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013. Notwithstanding any
other license agreement that may pertain to, or accompany the delivery of, this computer software, the rights of the
United States Government regarding its use, reproduction, and disclosure are as set forth in the Commercial Computer
Software-Restricted Rights clause at FAR 52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Corporation as is and any express or implied warranties, including,
but not limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event
shall Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or
consequential damages (including, but not limited to, procurement of substitute goods or services; loss of use, data,
or profits; or business interruption) however caused and on any theory of liability, whether in contract, strict liability, or
tort (including negligence or otherwise) arising in any way out of the use of this software, even if advised of the possi-
bility of such damage. Nokia reserves the right to make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document are trademarks or
registered trademarks of their respective holders.
All manuals and user guides at all-guides.com

Nokia Contact Information
Corporate Headquarters
Email [e-mail]
Web Site http://www.nokia.com
Telephone [phone] or 1-650-625-2000
Fax [phone]
Mail Address Nokia Inc.
313 Fairchild Drive
Mountain View, California
94043-2215 USA
Regional Contact Information
Nokia Customer Support
Web Site: https://support.nokia.com/
Email: [e-mail]
Americas
Voice: 1-888-361-5030 or 1-613-271-6721
Fax: [phone]
Europe
Voice: [phone]
Fax: [phone]
Asia-Pacific
Voice: [phone]
Fax: [phone]
Americas Nokia Inc.
313 Fairchild Drive
Mountain View, CA 94043-2215
USA
Tel: [phone]
Outside USA and Canada: [phone]
e-mail: [e-mail]
Europe Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG U.K
Tel: [phone] or 1+44 (0) 8700 555 777
e-mail: [e-mail]
Asia-Pacific Tel: [phone]
e-mail: info.ipnetworking_ap[email protected]m
All manuals and user guides at all-guides.com

All manuals and user guides at all-guides.com

IP700 Series Installation Guide 5
Contents
About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
About Nokia IP700 Series
Network Security Platforms. . . . . . . . . . . . . . 12
IP700 Series Documentation. . . . . . . . . . . . . . . . . . . 13
Structure of This Guide. . . . . . . . . . . . . . . . . . . . . . . 14
Conventions Used in This Guide . . . . . . . . . . . . . . . 16
CHAPTER 1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
About the IP700 Series Platform. . . . . . . . . . . . . . . . 19
Site Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
CHAPTER 2 Installing the IP700 Series Appliance. . . . . . . 23
Using DHCP to Configure the Appliance. . . . . . . . . 24
Using the Console Connection to Configure the
Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Connecting Power and Turning the Power On . . . . . 28
Connecting to the Console . . . . . . . . . . . . . . . . . . . . 30
Monitoring the Appliance . . . . . . . . . . . . . . . . . . . . . 33
CHAPTER 3 Installing, Monitoring, and Replacing
Components. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Network Interface Card Preinstallation
Considerations . . . . . . . . . . . . . . . . . . . . . . . . 36
Installing a New Network Interface Card . . . . . . . . . 43
Monitoring Network Interface Cards . . . . . . . . . . . . 45
Removing a Network Interface Card . . . . . . . . . . . . 46
Replacing a Network Interface Card. . . . . . . . . . . . . 49
Installing a PCMCIA Modem. . . . . . . . . . . . . . . . . . 52
Monitoring and Replacing a Hard-Disk Drive Unit . 53
Replacing the Fan Tray . . . . . . . . . . . . . . . . . . . . . . . 59
All manuals and user guides at all-guides.com

6 IP700 Series Installation Guide
Contents
Monitoring and Replacing a Power Supply . . . . . . . . 61
Upgrading the Memory . . . . . . . . . . . . . . . . . . . . . . . 64
CHAPTER 4 Configuring and Monitoring the
IP700 Series Appliance . . . . . . . . . . . . . . . . . . . . . . . 75
Entering the Hostname. . . . . . . . . . . . . . . . . . . . . . . . 76
Entering the Passwords . . . . . . . . . . . . . . . . . . . . . . . 76
Entering the Browser Type. . . . . . . . . . . . . . . . . . . . . 76
Entering Initial Interface Information . . . . . . . . . . . . 78
Confirming New System Setup Summary . . . . . . . . . 81
Using Voyager to Configure the Network Interfaces . 81
CHAPTER 5 Connecting to the Network . . . . . . . . . . . . . . . . . . . 85
Connecting to Ethernet Devices. . . . . . . . . . . . . . . . . 86
Connecting to V.35 or X.21 Devices . . . . . . . . . . . . . 91
Connecting to E1 (Built-in CSU/DSU) Devices . . . . 95
Connecting to T1 (Built-in CSU/DSU) Devices . . . . 99
Connecting to ATM Devices . . . . . . . . . . . . . . . . . . 102
Connecting to Gigabit Ethernet Devices . . . . . . . . .104
Connecting to a Modem . . . . . . . . . . . . . . . . . . . . . . 107
CHAPTER 6 Installing the Nokia Encryption Accelerator
Card. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Installing the Encryption Accelerator Card . . . . . . . 110
Enabling the Encryption Accelerator Card. . . . . . . . 117
CHAPTER 7 Using the Boot Manager. . . . . . . . . . . . . . . . . . . . . 119
Variables. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
Booting the System . . . . . . . . . . . . . . . . . . . . . . . . . 128
Using the Boot Manager to Install IPSO . . . . . . . . .129
All manuals and user guides at all-guides.com
all-guides.com

IP700 Series Installation Guide 7
Contents
Protecting the Boot Manager with a Password . . . . 130
Installing Boot Manager . . . . . . . . . . . . . . . . . . . . . 131
Upgrading Boot Manager . . . . . . . . . . . . . . . . . . . . 132
CHAPTER 8 Troubleshooting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
General Troubleshooting Information. . . . . . . . . . . 133
CHAPTER 9 Using tcpdump. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
tcpdump Command Basics . . . . . . . . . . . . . . . . . . . 148
Filtering Traffic With tcpdump . . . . . . . . . . . . . . . . 149
Saving tcpdump Results to a Local File . . . . . . . . . 150
CHAPTER 10 Tips for Installing, Configuring, and
Maintaining Your Appliance . . . . . . . . . . . . . . . . 153
APPENDIX A Technical Specifications . . . . . . . . . . . . . . . . . . . . 155
Physical . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
Environmental. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
NIC Interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 156
Space Requirements . . . . . . . . . . . . . . . . . . . . . . . . 157
APPENDIX B Compliance Information . . . . . . . . . . . . . . . . . . . . 159
Declaration of Conformity . . . . . . . . . . . . . . . . . . . 160
Compliance Statements. . . . . . . . . . . . . . . . . . . . . . 162
FCC Notice (US). . . . . . . . . . . . . . . . . . . . . . . . . . . 163
FCC Requirements (US) . . . . . . . . . . . . . . . . . . . . . 164
Equipment Attachment Regulations (Canada) . . . . 166
All manuals and user guides at all-guides.com

8 IP700 Series Installation Guide
Contents
APPENDIX C General Public Licensed Software . . . . . . . . . 167
GNU GENERAL PUBLIC LICENSE. . . . . . . . . . . 168
APPENDIX D Warranty and Software License . . . . . . . . . . . . 171
APPENDIX E Glossary of Abbreviations . . . . . . . . . . . . . . . . . . . 175
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
All manuals and user guides at all-guides.com

IP700 Series Installation Guide 9
Figures
Component Locations (Sample Configuration) . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Back Panel View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Component Location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Appliance Status LEDs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Network Interface Card Bus Locations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Connecting to Gigabit Ethernet NICs for High Availability With a DMZ Port . 40
High Availability With a DMZ Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Hard-Disk Drive Unit, Status LEDs, and Hot Swap Switch Locations . . . . . . . . 53
Power Switch Locations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Power Supply Status LED Locations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
DIMM Socket Locations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Pressing DIMMs Into DIMM Sockets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Voyager Reference Access Points Example. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Built-in Ethernet Interface Front Panel Details . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Typical Four-Port Ethernet Network Interface Card Front Panel Details . . . . . . 87
Output Connector for the Ethernet Cable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Ethernet Crossover-Cable Pin Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Typical Dual-Port V.35 or X.21 Network Interface Card Front Panel Details . . 91
Output Connector for the V.35 Cable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Output Connector for the X.21 Cable. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Typical E1 Network Interface Card Front Panel Details . . . . . . . . . . . . . . . . . . . 96
Output Connector for the E1 Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
E1 Crossover Cable Pin Connections. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
8-pin female (host) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Typical Nokia T1 Network Interface Card Front Panel Details. . . . . . . . . . . . . 100
Output Connector for the T1 Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
T1 Crossover Cable Pin Connections. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
8-pin female (host) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Typical ATM Network Interface Card Front Panel Details. . . . . . . . . . . . . . . . 102
Single-Port Gigabit Ethernet Network Interface Card Front Panel Details . . . . 105
Dual-Port Gigabit Ethernet Network Interface Card Front Panel Details . . . . . 105
Pin assignments for modem connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
All manuals and user guides at all-guides.com

10 IP700 Series Installation Guide
Figures
All manuals and user guides at all-guides.com

IP700 Series Installation Guide 11
About This Guide
This preface provides the following information:
•About Nokia IP700 Series Network Security Platforms (see page 12)
•IP700 Series Documentation (see page 13)
•Structure of This Guide (see page 14)
•Conventions Used in This Guide (see page 16)
All manuals and user guides at all-guides.com
all-guides.com

About This Guide
12 IP700 Series Installation Guide
About Nokia IP700 Series Network Security
Platforms
The Nokia IP700 Series network security platforms (NSP) appliances,
also referred to as the IP700 Series appliances, add service-provider-class
reliability to the proven Nokia platform. The combination of world-class
routing, market-leading firewall software, high availability, and the fastest
packet-forwarding rate in a single package in the industry sets a new
standard for firewall and virtual private network (VPN) solutions.
Ideally suited to provide secure Internet connectivity, the IP710 and IP740
combine high-performance, high-availability IP routing with a complete
implementation of the Check Point VPN-1/FireWall-1® enterprise
security suite. Various network interface cards give you flexibility in
making your network connections. For high availability, IP700 Series
appliances allow you to hot swap network interface cards, hard-disk drive
units, power supplies, and fan trays.
You can manage IP700 Series appliances by using Voyager, a Nokia
Web-based management application, and Nokia Horizon Manager
software.
With Voyager, you can manage, monitor, and configure IP700 Series
appliances from any authorized location within the network by using a
standard Web browser. Voyager is preinstalled on the IP700 Series
appliance. For information about accessing Voyager and the related
reference materials, see “Using Voyager to Configure the Network
Interfaces” on page 81.
The IP700 Series platform is fully supported by Nokia Horizon Manager
for secure image management, including:
•OS and application upgrades and licensing
•configuration-file backup and restore
•application installation
Nokia Horizon Manager allows you to manage all your NSPs and perform
image management actions on multiple platforms simultaneously.
All manuals and user guides at all-guides.com

IP700 Series Installation Guide 13
IP700 Series Documentation
IP700 Series Documentation
The Nokia documentation set consists of Release Notes for the Nokia
software release you are running, the IP700 Series Installation Guide
(this document), a Voyager inline help feature, and the Voyager
Reference Guide (online).
You can find the Release Notes and the IP700 Series Installation Guide
in both HTML and PDF formats on the World Wide Web support site
(https://support.nokia.com/).
You can access inline help when you use Voyager. Inline help is the
context-sensitive information source for Voyager.
To enable inline help for a specific subject, click the button next to the
subject.
Access the Voyager Reference Guide for tasks, examples, and more
information by pressing the DOC button.
You can order Check Point documentation from Nokia or download it
from the support site at https://support.nokia.com/.
All manuals and user guides at all-guides.com

About This Guide
14 IP700 Series Installation Guide
Structure of This Guide
This guide consists of the following chapters and appendixes:
•CHAPTER 1, Overview presents a general overview of the IP700
Series platform.
•CHAPTER 2, Installing the IP700 Series Appliance explains how to
physically connect the appliance to a network.
•CHAPTER 3, Installing, Monitoring, and Replacing Components
explains how to install, monitor, and replace network interface cards
and other components such as hard-disk drive units, power supplies,
fan units, and modems.
•CHAPTER 4, Configuring and Monitoring the IP700 Series
Appliance explains how to configure the appliance.
•CHAPTER 5, Connecting to the Network explains how to connect to
and use each of the supported network interface cards.
•CHAPTER 6, Installing the Nokia Encryption Accelerator Card
explains how to install and enable the accelerator card.
•CHAPTER 7, Using the Boot Manager explains how to use the boot
manager, which is part of the built-in IPSO software.
•CHAPTER 8, Troubleshooting discusses problems you might
encounter and proposes solutions to these problems.
•CHAPTER 9, Using tcpdump discusses the tcpdump utility, which
allows you to view traffic on a network.
•CHAPTER 10, Tips for Installing, Configuring, and Maintaining
Your Appliance provides a list of suggestions for installing,
configuring, and maintaining your appliance.
•APPENDIX A, Technical Specifications gives technical
specifications such as interface characteristics.
•APPENDIX B, Compliance Information includes compliance and
regulatory information.
All manuals and user guides at all-guides.com

IP700 Series Installation Guide 15
Structure of This Guide
•APPENDIX C, General Public Licensed Software provides
information about publicly licensed software that comes with the
appliance.
•APPENDIX D, Warranty and Software License contains Nokia
warranty and software license information.
•APPENDIX E, Glossary of Abbreviations provides definitions to
acronyms and initialisms used throughout the guide.
All manuals and user guides at all-guides.com

About This Guide
16 IP700 Series Installation Guide
Conventions Used in This Guide
This section describes the conventions used in text, examples, and
graphics.
Typeface/
Meaning Example
Italic
• Link, data entry location,
menu name, option name,
Web page, or Web-page
section name
• A command-line
placeholder
• An important word or
phrase
• Reference to a section or
document
Click the Interfaces link.
Turn Internal Clock off.
To delete a file type rm filename.
This is the Overview chapter.
SMALL CAPS
• Button to click with your
mouse Click CONFIG.
Courier New
• File names, directories
• Screen text presented by
the computer rather than
text you enter yourself
Hostname?
Courier New Bold
• Literal text that you enter
on the screen Type ser-s1p2 to configure the interface.
All manuals and user guides at all-guides.com
all-guides.com

IP700 Series Installation Guide 17
Conventions Used in This Guide
WARNING: Shows critical information that, if ignored, could cause
injuries to you or to other people, damage to your equipment, or a
potential security breach.
Caution: Addresses actions that cause damage to equipment,
compromise the system, or would cause data loss.
NOTE: Calls special attention to important information.
!
All manuals and user guides at all-guides.com

About This Guide
18 IP700 Series Installation Guide
All manuals and user guides at all-guides.com

IP700 Series Installation Guide 19
CHAPTER 1 Overview
About the IP700 Series Platform
The Nokia IP700 Series platform combines the power of IPSO software
with your choice of applications. Each IP700 Series appliance consists of
components in three primary categories:
•Nokia hardware
•Selected network interface cards
•Designated software applications
All manuals and user guides at all-guides.com

Chapter 1: Overview
20 IP700 Series Installation Guide
The following diagram shows component locations in a sample
configuration.
The IP700 Series appliance can support two power supplies. In addition,
the IP700 Series appliance can house two disk drive units. However, the
feature of mirrored disk drives will only be supported when IPSO is
released with disk mirroring capabilities.
00082
Component Locations (Sample Configuration)
Hard-Disk
Drive
Four-port Ethernet
(10/100 Mbps) card
T1 Card
Console port
Four-port Ethernet
(10/100 Mbps)
Fan tray
0008
6
Power supplies
Front View
Rear View
Modem port
PCMCIA Slot
All manuals and user guides at all-guides.com