Nokia IP350 - Security Appliance User manual

60s and 100s
Installation Guide
Part No. N451545001 Rev A
Published February 2005

2 Nokia 60s and 100s Installation Guide
COPYRIGHT
©2005 Nokia Corporation. All rights reserved.
Rights reserved under the copyright laws of the United States.
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the United States Government is subject to restrictions as set
forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013. Notwithstanding any other license agreement that may pertain to, or
accompany the delivery of, this computer software, the rights of the United States Government
regarding its use, reproduction, and disclosure are as set forth in the Commercial Computer
Software-Restricted Rights clause at FAR 52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Corporation as is and any express or implied
warranties, including, but not limited to, implied warranties of merchantability and fitness for a
particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or
suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential
damages (including, but not limited to, procurement of substitute goods or services; loss of use,
data, or profits; or business interruption) however caused and on any theory of liability, whether in
contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use
of this software, even if advised of the possibility of such damage. Nokia reserves the right to
make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document
are trademarks or registered trademarks of their respective holders.

Nokia 60s and 100s Installation Guide 3
Nokia Contact Information
Corporate Headquarters
Regional Contact Information
Nokia Customer Support
Web Site http://www.nokia.com
Telephone [phone] or
1-650-625-2000
Fax [phone]
Mail
Address
Nokia Inc.
313 Fairchild Drive
Mountain View, California
94043-2215 USA
Americas Nokia Internet Communications
313 Fairchild Drive
Mountain View, CA 94043-2215
USA
Tel: [phone]
Outside USA and Canada: [phone]
email: ipsecurity[email protected]
Europe,
Middle East,
and Africa
Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG UK
Tel: UK: [phone]
Tel: France: [phone]
email: ipsecurity[email protected]
Asia-Pacific 438B Alexandra Road
#07-00 Alexandra Technopark
Singapore 119968
Tel: [phone]
email: [e-mail]
Web Site: https://support.nokia.com/
Email: [email protected]
Americas Europe
Voice: 1-888-361-5030 or
1-613-271-6721
Voice: [phone]
Fax: [phone] Fax: [phone]
Asia-Pacific
Voice: [phone]
Fax: [phone]
021216

4 Nokia 60s and 100s Installation Guide

Nokia 60s and 100s Installation Guide 5
Contents
About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
In This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Conventions This Guide Uses . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Command-Line Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
About the Nokia 60s and 100s Appliances. . . . . . . . . . . . . . . . . . . 17
Memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Encryption Acceleration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Managing the Nokia 60s and 100s Appliances . . . . . . . . . . . . . . . 18
Appliance Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Ethernet Management Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Built-in Console Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Built-in AUX Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Site Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Software Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
2 Installing the Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Rack Mounting the Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Connecting Power and Turning the Power On. . . . . . . . . . . . . . . . 29
Connecting Network Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

6 Nokia 60s and 100s Installation Guide
3 Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . 31
Using a Console Connection to Perform the Initial Configuration . 32
Accessing Nokia Network Voyager . . . . . . . . . . . . . . . . . . . . . . . . 34
Accessing Voyager Reference Information. . . . . . . . . . . . . . . . . 35
Using Voyager to Monitor a Nokia 60s or 100s Appliance . . . . . 36
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
4 Installing and Replacing Network Interface Cards . . . . . . . . . 37
Deactivating Configured Interfaces . . . . . . . . . . . . . . . . . . . . . . . . 38
Removing, Installing, and Replacing NICs. . . . . . . . . . . . . . . . . . . 38
Configuring and Activating Interfaces . . . . . . . . . . . . . . . . . . . . . . 44
Monitoring Network Interface Cards. . . . . . . . . . . . . . . . . . . . . . . . 45
5 Connecting PMC Network Interface Cards . . . . . . . . . . . . . . . . 47
Dual-Port 10/100 Ethernet Interface, PMC . . . . . . . . . . . . . . . . . . 47
Ethernet PMC NIC Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Ethernet NIC Connectors and Cables. . . . . . . . . . . . . . . . . . . . . 48
6 Installing and Replacing Other Components . . . . . . . . . . . . . . 51
Installing a PCMCIA Modem . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Replacing a Hard-Disk Drive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Replacing or Upgrading Memory . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Before You Start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Adding or Replacing DIMMs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Installing an Encryption Accelerator Card . . . . . . . . . . . . . . . . . . . 64
Before You Start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Installing the Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
7 Using the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Viewing the Variables and Other System Parameters . . . . . . . . 74

Nokia 60s and 100s Installation Guide 7
Setting the Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Other commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
Booting the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Using the Boot Manager to Install IPSO. . . . . . . . . . . . . . . . . . . . . 80
Protecting the Boot Manager with a Password . . . . . . . . . . . . . . . 81
Installing the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Upgrading the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
8 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
General Troubleshooting Information. . . . . . . . . . . . . . . . . . . . . . . 85
Troubleshooting Routing Problems . . . . . . . . . . . . . . . . . . . . . . . . 95
A Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Physical Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Space Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
NIC Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
B Compliance Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Declaration of Conformity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
Compliance Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
FCC Notice (US) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109

8 Nokia 60s and 100s Installation Guide

Nokia 60s and 100s Appliance Installation Guide 9
Figures
Figure 1 Component Locations Front View . . . . . . . . . . . . . . . . . 19
Figure 2 Component Locations Rear View . . . . . . . . . . . . . . . . . 19
Figure 3 Ethernet Management Ports Details . . . . . . . . . . . . . . . 20
Figure 4 Pin Assignments for Console Connection . . . . . . . . . . . 21
Figure 5 Pin Assignments for Modem Connection . . . . . . . . . . . 22
Figure 6 Appliance Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . 23
Figure 7 Mounting Screws Location . . . . . . . . . . . . . . . . . . . . . . 28
Figure 8 Adjustable Mounting Brackets . . . . . . . . . . . . . . . . . . . . 28
Figure 9 Back Panel Power Switch . . . . . . . . . . . . . . . . . . . . . . . 29
Figure 10 Voyager Reference Access Points . . . . . . . . . . . . . . . 35
Figure 11 Dual-Port Ethernet NIC Front Panel Details . . . . . . . . 48
Figure 12 Output Connector for the Ethernet Cable . . . . . . . . . . 49
Figure 13 Ethernet Crossover-Cable Pin Connections . . . . . . . . 50
Figure 14 Hard-Disk Drive Location . . . . . . . . . . . . . . . . . . . . . . 53
Figure 15 DIMM Socket Locations . . . . . . . . . . . . . . . . . . . . . . . 58

10 Nokia 60s and 100s Appliance Installation Guide

Nokia 60s and 100s Installation Guide 11
About this Guide
This manual provides information for the installation and use of the Nokia 60s
and 100s appliances. Installation and maintenance should be performed by
experienced technicians or Nokia-approved service providers only.
This preface provides the following information:
In This Guide
Conventions This Guide Uses
Related Documentation
In This Guide
This guide is organized into the following chapters and appendixes:
Chapter 1, “Overview” presents a general overview of the 60s and 100s
appliances.
Chapter 2, “Installing the Appliance” explains how to rack-mount the
appliance and how to physically connect it to a network and power.
Chapter 3, “Performing the Initial Configuration” explains how to make
the appliance available on the network.
Chapter 4, “Installing and Replacing Network Interface Cards” explains
how to install, monitor, and replace network interface cards (NICs).
Chapter 5, “Connecting PMC Network Interface Cards” explains how to
connect to and use each of the supported NICs.

12 Nokia 60s and 100s Installation Guide
Chapter 6, “Installing and Replacing Other Components” explains how to
install or replace PCMCIA modems, memory, the hard-disk drive, and an
encryption accelerator card (Nokia 100s only).
Chapter 7, “Using the Boot Manager” explains how to use the boot
manager, which is part of the IPSO software.
Chapter 8, “Troubleshooting” discusses problems you might encounter
and proposes solutions to these problems.
Appendix A, “Technical Specifications” gives technical specifications
such as interface characteristics.
Appendix B, “Warranty and Software License” contains Nokia warranty
and software license information.
Appendix C, “General Public Licensed Software” provides information
about publicly licensed software that comes with the appliance.
Appendix B, “Compliance Information” includes compliance and
regulatory information.
Appendix E, “Glossary” provides a glossary of acronyms used in this
document.
Conventions This Guide Uses
The following sections describe the conventions this guide uses, including
notices, text conventions, and command-line conventions.
Notices
Warning
Warnings advise the user that bodily injury might occur because of a
physical hazard.

Conventions This Guide Uses
Nokia 60s and 100s Installation Guide 13
Caution
Cautions indicate potential equipment damage, equipment
malfunction, loss of performance, loss of data, or interruption of
service.
Note
Notes provide information of special interest or recommendations.
Command-Line Conventions
This section defines the elements of commands that are available in Nokia
Internet Communications products. You might encounter one or more of the
following elements on a command-line path.
Table 1 Command-Line Conventions
Convention Description
command This required element is usually the product name or other
short word that invokes the product or calls the compiler or
preprocessor script for a compiled Nokia product. It might
appear alone or precede one or more options. You must
spell a command exactly as shown and use lowercase
letters.
Italics Indicates a variable in a command that you must supply. For
example:
delete interface if_name
Supply an interface name in place of the variable. For
example:
delete interface nic1

14 Nokia 60s and 100s Installation Guide
angle brackets < > Indicates arguments for which you must supply a value:
retry-limit <1–100>
Supply a value. For example:
retry-limit 60
Square brackets [ ] Indicates optional arguments.
delete [slot slot_num]
For example:
delete slot 3
Vertical bars, also
called a pipe (|)
Separates alternative, mutually exclusive elements.
framing <sonet | sdh>
To complete the command, supply the value. For example:
framing sonet
or
framing sdh
-flag A flag is usually an abbreviation for a function, menu, or
option name, or for a compiler or preprocessor argument.
You must enter a flag exactly as shown, including the
preceding hyphen.
.ext A filename extension, such as .ext, might follow a variable
that represents a filename. Type this extension exactly as
shown, immediately after the name of the file. The extension
might be optional in certain products.
Table 1 Command-Line Conventions (continued)
Convention Description

Conventions This Guide Uses
Nokia 60s and 100s Installation Guide 15
Text Conventions
Table 2 describes the text conventions this guide uses.
( . , ; + * - / ) Punctuation and mathematical notations are literal symbols
that you must enter exactly as shown.
' ' Single quotation marks are literal symbols that you must
enter as shown.
Table 1 Command-Line Conventions (continued)
Convention Description
Table 2 Text Conventions
Convention Description
monospace font Indicates command syntax, or represents computer or
screen output, for example:
Log error 12453
bold monospace font Indicates text you enter or type, for example:
# configure nat
Key names Keys that you press simultaneously are linked by a
plus sign (+):
Press Ctrl + Alt + Del.
Menu commands Menu commands are separated by a greater than
sign (>):
Choose File > Open.

16 Nokia 60s and 100s Installation Guide
Related Documentation
The Nokia 60s and 100s documentation set consists of Release Notes for the
Nokia software release you are running, the Nokia 60s and 100s Installation
Guide (this document), a Voyager inline help feature, and the Voyager
Reference Guide (online).
You can find the Nokia 60s and 100s Installation Guide in PDF on the World
Wide Web support site (https://support.nokia.com/).
You can access inline help and the Voyager Reference Guide from Voyager,
the interface to the IPSO operating system.
To access inline help for a specific subject, click the Help button next to the
subject.
Access the Voyager Reference Guide for tasks, examples, and more
information by clicking the Doc button.
The words enter and type Enter indicates you type something and then press
the Return or Enter key.
Do not press the Return or Enter key when an
instruction says type.
Italics •Emphasizes a point or denotes new terms at the
place where they are defined in the text.
•Indicates an external book title reference.
•Indicates a variable in a command:
delete interface if_name
Table 2 Text Conventions (continued)
Convention Description

Nokia 60s and 100s Installation Guide 17
1Overview
This chapter provides an overview of the 60s and 100s appliances and the
requirements for using those appliances. The following topics are covered:
About the Nokia 60s and 100s Appliances
Managing the Nokia 60s and 100s Appliances
Site Requirements
Software Requirements
About the Nokia 60s and 100s Appliances
The Nokia 60s and 100s appliances combine the power of the Nokia IPSO
operating system and Nokia Secure Access System (Nokia SAS). Both the
60s and 100s platforms share the same one-rack unit (1 RU) size and support
the same selection of network interface cards.
Memory
The Nokia 60s appliance supports from 256 MB to 512 MB of memory.
The Nokia 100s appliance supports from 256 MB to 1 GB of memory and
provides approximately twice the throughput of the Nokia 60s.

1Overview
18 Nokia 60s and 100s Installation Guide
Encryption Acceleration
Both the 60s and 100s appliances provide built-in hardware-based encryption
acceleration. The 100s appliance also supports an optional encryption
accelerator card to further enhance SSL VPN performance.
This guide provides documentation for both the 60s and 100s appliances.
Most of the information for how to use these two appliances is the same.
Where differences exist, they are noted in the documentation.
The Nokia 60s and 100s appliances are ideally suited for growing companies
and satellite offices. The small size of the 60s and 100s appliance makes them
ideal for installations that need to conserve space.
As network devices, the 60s and 100s appliances support a comprehensive
suite of IP-routing functions and protocols, including RIPv1/RIPv2, IGRP,
OSPF and BGP4 for unicast traffic, and DVMRP for multicast traffic. The
integrated router functionality eliminates the need for separate intranet and
access routers in security applications.
Managing the Nokia 60s and 100s Appliances
You can manage the 60s and 100s appliances by using the Nokia Network
Voyager:
Nokia Network Voyager—an SSL-secured, Web-based element
management interface. Voyager is preinstalled on the 60s and 100s appliance
and enabled through the IPSO operating system. With Voyager, you can
manage, monitor, and configure the 60s and 100s appliance from any
authorized location within the network by using a standard Web browser.
For information about how to access Voyager and the related reference
materials, see “Accessing Nokia Network Voyager” on page 34.

Appliance Overview
Nokia 60s and 100s Installation Guide 19
Appliance Overview
The following figures show component locations for the Nokia 60s and 100s.
Figure 1 Component Locations Front View
Figure 2 Component Locations Rear View
00487
60s
Built-in Ethernet ports for
management connection
PMC interfaces
Status LEDs Modem (AUX) port
PCMCIA slotsReset switch Console port
00249
Power plugPower switch

1Overview
20 Nokia 60s and 100s Installation Guide
Ethernet Management Ports
The Ethernet management ports are located on the front of the appliance.
Figure 3 shows the layout of the Ethernet management ports and link LEDs.
Note
The Ethernet management ports are intended for management purposes.
These ports do not provide the same performance as Ethernet cards in
the PMC slots.
Figure 3 Ethernet Management Ports Details
Caution
Cables that connect to the Ethernet ports must be IEEE 802.3
compliant to prevent potential data loss.
The 60s and 100s appliances include two PMC (PCI mezzanine cards)
expansion slots for Nokia supported network interface cards. For information
about using supported LAN cards, see page 47.
The 60s and 100s appliances also include a PCMCIA slot that supports
PCMCIA modems. See “Installing a PCMCIA Modem” on page 52.
00120
Activity LED (yellow)
Link LED (green)
RJ-45 connectors