Nokia IP2255 - Security Appliance User manual

Part No. N450000275 Rev 002
Published March 2007
Nokia IP2255 Security
Platform Installation Guide

2 Nokia IP2255 Security Platform Installation Guide
COPYRIGHT
©2007 Nokia. All rights reserved.
Rights reserved under the copyright laws of the United States.
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the United States Government is subject to restrictions as set
forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of,
this computer software, the rights of the United States Government regarding its use,
reproduction, and disclosure are as set forth in the Commercial Computer Software-Restricted
Rights clause at FAR 52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Inc. as is and any express or implied
warranties, including, but not limited to, implied warranties of merchantability and fitness for a
particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or
suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential
damages (including, but not limited to, procurement of substitute goods or services; loss of use,
data, or profits; or business interruption) however caused and on any theory of liability, whether in
contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use
of this software, even if advised of the possibility of such damage.
Nokia reserves the right to make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document
are trademarks or registered trademarks of their respective holders.
070101

Nokia IP2255 Security Platform Installation Guide 3
Nokia Contact Information
Corporate Headquarters
Regional Contact Information
Nokia Customer Support
Web Site http://www.nokia.com
Telephone [phone]
or
1-650-625-2000
Fax [phone]
Mail
Address
Nokia Inc.
313 Fairchild Drive
Mountain View, California
94043-2215 USA
Americas Nokia Inc.
313 Fairchild Drive
Mountain View, CA 94043-2215
USA
Tel: [phone]
Outside USA and Canada: [phone]
email: info.ipnetworking_america[email protected]
Europe,
Middle East,
and Africa
Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG UK
Tel: UK: [phone]
Tel: France: [phone]
email: [e-mail]
Asia-Pacific 438B Alexandra Road
#07-00 Alexandra Technopark
Singapore 119968
Tel: [phone]
email: [email protected]
Web Site: https://support.nokia.com/
Email: [email protected]
Americas Europe
Voice: 1-888-361-5030 or
1-613-271-6721
Voice: [phone]
Fax: [phone] Fax: [phone]
Asia-Pacific
Voice: [phone]
Fax: [phone]
050602

4 Nokia IP2255 Security Platform Installation Guide

Nokia IP2255 Security Platform Installation Guide 5
Contents
About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
In this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Conventions this Guide Uses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
About the Nokia IP2255 Security Platform . . . . . . . . . . . . . . . . . . . 19
Managing the Nokia IP2255 Appliance . . . . . . . . . . . . . . . . . . . . . 20
Nokia IP2255 Appliance Overview. . . . . . . . . . . . . . . . . . . . . . . . . 21
Ethernet Management Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Nokia Network Interface Cards . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Console Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Serial Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
System Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Fan Unit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Storage Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Power Supplies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Product Disposal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Site Requirements, Warnings, and Cautions . . . . . . . . . . . . . . . . . 33
Software Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
2 Installing Nokia IP2255 Appliances . . . . . . . . . . . . . . . . . . . . . . 37
Rack Mounting the Security Platform . . . . . . . . . . . . . . . . . . . . . . . 37
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

6 Nokia IP2255 Security Platform Installation Guide
3 Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . 45
Using a Console Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Connecting Power and Turning the Power On. . . . . . . . . . . . . . . . 47
Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . 50
Connecting Network Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Using Nokia Network Voyager . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Viewing Nokia IPSO Documentation by Using
Nokia Network Voyager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Using the Command-Line Interface . . . . . . . . . . . . . . . . . . . . . . . . 55
Using Nokia Horizon Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
4 Connecting to the Network Interface Cards . . . . . . . . . . . . . . . 59
Eight-Port 10/100 Ethernet NIC . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
10/100 Ethernet NIC Features . . . . . . . . . . . . . . . . . . . . . . . . . . 60
10/100 Ethernet NIC Connectors and Cables. . . . . . . . . . . . . . . 61
Two-Port and Four-Port Copper Gigabit Ethernet NIC . . . . . . . . . 64
Copper Gigabit Ethernet NIC Features . . . . . . . . . . . . . . . . . . . . 64
Copper Gigabit Ethernet NIC Connectors and Cables . . . . . . . . 65
Two-Port and Four-Port Fiber-Optic Gigabit Ethernet NIC . . . . . . 67
Fiber-Optic Gigabit Ethernet NIC Features . . . . . . . . . . . . . . . . . 67
Fiber-Optic Gigabit Ethernet NIC Connectors and Cables . . . . . 68
Single-Port Fiber-Optic 10 Gigabit Ethernet NIC . . . . . . . . . . . . . . 69
Fiber-Optic 10 Gigabit Ethernet NIC Features . . . . . . . . . . . . . . 69
Fiber-Optic 10 Gigabit Ethernet NIC Connectors and Cables. . . 70
5 Installing, Replacing, and Configuring the
Nokia Encryption Accelerator Card . . . . . . . . . . . . . . . . . . . . . . 73
Removing, Installing, and Replacing the Nokia Encryption Accelerator
Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Before you Begin. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Configuring and Activating Encryption Acceleration . . . . . . . . . . . 78

Nokia IP2255 Security Platform Installation Guide 7
6 Installing and Replacing Network Interface Cards . . . . . . . . . . 79
Removing, Installing, and Replacing NICs . . . . . . . . . . . . . . . . . . . 80
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Configuring and Activating Interfaces. . . . . . . . . . . . . . . . . . . . . . . 84
Monitoring NICs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
7 Installing and Replacing Other Components . . . . . . . . . . . . . . 85
Replacing the Compact-Flash Memory Card . . . . . . . . . . . . . . . . . 86
Replacing the Memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Replacing the Fan Unit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
Replacing a Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Replacing the Management NIC . . . . . . . . . . . . . . . . . . . . . . . . . 100
8 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
General Troubleshooting Information. . . . . . . . . . . . . . . . . . . . . . 105
A Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Space Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
B Compliance Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Declaration of Conformity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
Compliance Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
FCC Notice (US) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

8 Nokia IP2255 Security Platform Installation Guide

Nokia IP2255 Security Platform Installation Guide 9
Tables
Table 1 Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Table 2 NICs Available for the Network Interface Card Slots . . . 25
Table 3 System Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Table 4 Power Supply Status LEDs . . . . . . . . . . . . . . . . . . . . . . 32

10 Nokia IP2255 Security Platform Installation Guide