Nokia EM5400 User manual

2 Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide
COPYRIGHT
©2004 Nokia. All rights reserved.
Rights reserved under the copyright laws of the United States.
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the United States Government is subject to restrictions as set
forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of,
this computer software, the rights of the United States Government regarding its use,
reproduction, and disclosure are as set forth in the Commercial Computer Software-Restricted
Rights clause at FAR 52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Inc. as is and any express or implied
warranties, including, but not limited to, implied warranties of merchantability and fitness for a
particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or
suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential
damages (including, but not limited to, procurement of substitute goods or services; loss of use,
data, or profits; or business interruption) however caused and on any theory of liability, whether in
contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use
of this software, even if advised of the possibility of such damage.
Nokia reserves the right to make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document
are trademarks or registered trademarks of their respective holders.
040113
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances
w
ww.anatel.gov.br

Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide 3
Nokia Contact Information
Corporate Headquarters
Regional Contact Information
Nokia Customer Support
Web Site http://www.nokia.com
Telephone [phone] or
1-650-625-2000
Fax [phone]
Mail
Address
Nokia Inc.
313 Fairchild Drive
Mountain View, California
94043-2215 USA
Americas Nokia Inc.
313 Fairchild Drive
Mountain View, CA 94043-2215
USA
Tel: [phone]
Outside USA and Canada: [phone]
email: ipsecurity[email protected]
Europe,
Middle East,
and Africa
Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG UK
Tel: UK: [phone]
Tel: France: [phone]
email: ipsecurity[email protected]
Asia-Pacific 438B Alexandra Road
#07-00 Alexandra Technopark
Singapore 119968
Tel: [phone]
email: ipsecurity.ap[email protected]
Web Site: https://support.nokia.com/
Email: [email protected]
Americas Europe
Voice: 1-888-361-5030 or
1-613-271-6721
Voice: [phone]
Fax: [phone] Fax: [phone]
Asia-Pacific
Voice: [phone]
Fax: [phone]
031014
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

4 Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide 5
Contents
About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
In This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Conventions This Guide Uses . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Command-Line Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
About the Nokia EM5400 IP Security Platform. . . . . . . . . . . . . . . . 19
Managing EM5400 IP Security Platform Appliances . . . . . . . . . . . 20
Nokia EM5400 IP Security Platform Appliance Overview . . . . . . . 21
Built-in Ethernet Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Console and Serial (AUX) Ports . . . . . . . . . . . . . . . . . . . . . . . . . 23
System Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Site Requirements, Warnings, and Cautions . . . . . . . . . . . . . . . . . 27
2 Installing a Nokia EM5400 IP Security Platform Appliance . . . 29
Rack Mounting a Single Nokia EM5400 IP Security Platform
Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Rack Mounting Two Nokia EM5400 IP Security Platform Appliances
Side by Side . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

6 Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide
3 Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . 37
Using a Console Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Connecting Power and Turning the Power On. . . . . . . . . . . . . . . . 39
Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . 41
Connecting Network Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Using Nokia Network Voyager to Manage Your Appliance . . . . . . 42
Viewing Nokia IPSO Documentation by Using
Nokia Network Voyager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Nokia Network Voyager Reference Guide for Nokia IPSO . . . . . 44
Nokia Network Voyager Inline Help for IPSO . . . . . . . . . . . . . . . 45
Using the Command-Line Interface to Manage Your Appliance . . 45
Using Nokia Horizon Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
4 Connecting to the Ethernet Ports . . . . . . . . . . . . . . . . . . . . . . . 47
Built-In Four-Port 10/100 Ethernet Interface . . . . . . . . . . . . . . . . . 47
Ethernet Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Connecting to Ethernet Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
5 Configuring and Activating Encryption Acceleration . . . . . . . 51
Configuring and Activating Nokia Encryption Acceleration . . . . . . 51
Configuring Software to Use Hardware Acceleration. . . . . . . . . . . 52
6 Installing PC Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Installing a Flash Memory PC Card . . . . . . . . . . . . . . . . . . . . . . . . 54
Storing System Logs on the Flash-Memory PC Card . . . . . . . . . . 55
Transferring Files with the Flash-Memory PC Card . . . . . . . . . . . . 56
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide 7
7 Using the Nokia IPSO Boot Manager . . . . . . . . . . . . . . . . . . . . . 59
Boot-Manager Variables. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
Viewing the Variables and Other System Parameters . . . . . . . . 62
Setting the Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Other Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Booting the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Using the Boot Manager to Install Nokia IPSO . . . . . . . . . . . . . . . 69
Protecting the Boot Manager with a Password . . . . . . . . . . . . . . . 70
Installing the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Upgrading the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
8 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
General Troubleshooting Information. . . . . . . . . . . . . . . . . . . . . . . 73
A Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Physical Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Space Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Other Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Appliance Interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
B Compliance Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Declaration of Conformity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Compliance Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
FCC Notice (US) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

8 Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide 9
Tables
Table 1 Command-Line Conventions . . . . . . . . . . . . . . . . . . . . . 15
Table 2 Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Table 3 Pin Assignments for DB9 and DB25 Interface Cables . . 25
Table 4 Appliance Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Table 5 Boot Manager Variables . . . . . . . . . . . . . . . . . . . . . . . . . 61
Table 6 Boot Flags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Table 7 unsetenv Command Examples . . . . . . . . . . . . . . . . . . . 66
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

10 Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide 11
Figures
Figure 1 Component Locations Front View . . . . . . . . . . . . . . . . . 21
Figure 2 Component Locations Rear View . . . . . . . . . . . . . . . . . 22
Figure 3 Built-In Ethernet Interface Front Panel Details . . . . . . . 22
Figure 4 Pin Assignments for Console and AUX Connections . . 24
Figure 5 Appliance Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . 26
Figure 6 Installing the Mounting Brackets . . . . . . . . . . . . . . . . . . 30
Figure 7 Single Appliance Installation . . . . . . . . . . . . . . . . . . . . . 31
Figure 8 Power Switch Location . . . . . . . . . . . . . . . . . . . . . . . . . 39
Figure 9 Nokia Network Voyager Reference Access Points . . . . 44
Figure 10 Output Connector for the Ethernet Cable . . . . . . . . . . 49
Figure 11 Ethernet Crossover Cable Pin Connections . . . . . . . . 50
Figure 12 Inserting a PC Card . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

12 Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide 13
About this Guide
This guide provides information for the installation and use of the Nokia
EM5400 IP Security Platform appliances, which consists of the Nokia IP260
and Nokia IP265 appliances. Installation and maintenance should be
performed by experienced technicians or Nokia-approved service providers
only.
This preface provides the following information:
In This Guide
Conventions This Guide Uses
Related Documentation
In This Guide
This guide is organized into the following chapters and appendixes:
Chapter 1, “Overview” presents a general overview of the Nokia EM5400
IP Security Platform.
Chapter 2, “Installing a Nokia EM5400 IP Security Platform Appliance”
explains how to rack mount the appliance and how to physically connect
it to a network and power.
Chapter 3, “Performing the Initial Configuration” explains how to make
the appliance available on the network.
Chapter 4, “Connecting to the Ethernet Ports” describes how to connect to
the supported Ethernet ports.
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

14 Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide
Chapter 5, “Configuring and Activating Encryption Acceleration”
describes how to configure and activate the built-in encryption
acceleration feature.
Chapter 6, “Installing PC Cards” explains how to install or replace ATA
flash-memory PC cards in your EM5400 appliance.
Chapter 7, “Using the Nokia IPSO Boot Manager” explains how to use
the boot manager, which is part of the Nokia IPSO software.
Chapter 8, “Troubleshooting” discusses problems you might encounter
and proposes solutions to these problems.
Appendix A, “Technical Specifications” gives technical specifications
such as interface characteristics.
Appendix B, “Compliance Information” includes compliance and
regulatory information.
Conventions This Guide Uses
The following sections describe the conventions this guide uses, including
notices, text conventions, and command-line conventions.
Notices
Warning
Warnings advise the user that bodily injury might occur because of a
physical hazard.
Caution
Cautions indicate potential equipment damage, equipment
malfunction, loss of performance, loss of data, or interruption of
service.
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

Conventions This Guide Uses
Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide 15
Note
Notes provide information of special interest or recommendations.
Command-Line Conventions
This section defines the elements of commands that are available in Nokia
Internet Communications products. You might encounter one or more of the
following elements in a command-line path.
Table 1 Command-Line Conventions
Convention Description
command A user-generated instruction typically sent using a console
or terminal. The command statement and its associated
syntax must be entered exactly as shown in lowercase
letters.
italics Indicates a variable in a command that you must supply. For
example:
delete interface if_name
Supply an interface name in place of the variable. For
example:
delete interface nic1
angle brackets < > Indicates arguments for which you must supply a value:
retry-limit <1–100>
Supply a value. For example:
retry-limit 60
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

16 Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide
Text Conventions
Table 2 describes the text conventions this guide uses.
-flag A flag is usually an abbreviation for a function, menu, or
option name, or for a compiler or preprocessor argument.
You must enter a flag exactly as shown, including the
preceding hyphen.
.ext A filename extension, such as .ext, might follow a variable
that represents a filename. Type this extension exactly as
shown, immediately after the name of the file. The extension
might be optional in certain products.
( . , ; + * - / ) Punctuation and mathematical notations are literal symbols
that you must enter exactly as shown.
Table 1 Command-Line Conventions (continued)
Convention Description
Table 2 Text Conventions
Convention Description
monospace font Indicates command syntax, or represents computer or
screen output, for example:
Log error 12453
bold monospace font Indicates text you enter or type, for example:
# configure nat
Key names Keys that you press simultaneously are linked by a
plus sign (+):
Press Ctrl + Alt + Del.
Menu commands Menu commands are separated by a greater than
sign (>):
Choose File > Open.
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

Related Documentation
Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide 17
Related Documentation
You can find this guide in PDF on the Nokia support Web site (https://
support.nokia.com/).
In addition to this guide, documentation for this product includes the
following:
Getting Started Guide and Release Notes for the version of IPSO you are
using
Nokia Network Voyager Reference Guide for the version of IPSO you are
using
CLI Reference Guide for the version of IPSO you are using
Nokia Network Voyager inline help
You can access the Nokia Voyager inline help, the Nokia Network Voyager
Reference Guide, and the CLI Reference Guide for the version of IPSO you
are using from the Nokia Voyager application.
Check Point documentation is available from the Check Point Web site at
http://www.checkpoint.com. You can also order Check Point documentation
from Nokia or download it from the Nokia support site at https://
support.nokia.com.
The words enter and type Enter indicates you type something and then press
the Return or Enter key.
Do not press the Return or Enter key when an
instruction says type.
Italics •Emphasizes a point or denotes new terms at the
place where they are defined in the text.
•Indicates an external book title reference.
•Indicates a variable in a command:
delete interface if_name
Table 2 Text Conventions (continued)
Convention Description
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

18 Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide 19
1Overview
This chapter provides an overview of the Nokia EM5400 IP Security Platform
and the requirements for using the appliances. The following topics are
covered:
About the Nokia EM5400 IP Security Platform
Managing EM5400 IP Security Platform Appliances
Nokia EM5400 IP Security Platform Appliance Overview
Site Requirements, Warnings, and Cautions
About the Nokia EM5400 IP Security Platform
The Nokia EM5400 IP Security Platform combines the power of Nokia IPSO
software with your choice of firewall and VPN applications.
The EM5400 platform provides built-in hardware-based encryption
acceleration.
The EM5400 appliances are ideally suited for growing companies and
satellite offices that want high-performance IP routing combined with the
industry-leading Check Point VPN-1/FireWall-1 enterprise security suite. The
small size of the EM5400 appliances makes them ideal for installations that
need to conserve space.
As network devices, the EM5400 appliances support a comprehensive suite of
IP-routing functions and protocols, including RIPv1/RIPv2, IGRP, OSPF and
BGP4 for unicast traffic, and DVMRP for multicast traffic. The integrated
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances

1Overview
20 Nokia EM5400 IP Security Platform (IP260 and IP265 Appliances) Installation Guide
router functionality eliminates the need for separate intranet and access
routers in security applications.
For more information and technical specifications, see “Technical
Specifications” on page 79.
Managing EM5400 IP Security Platform
Appliances
You can manage Nokia EM5400 appliances by using one of the following
interfaces:
Nokia Network Voyager—an SSL-secured, Web-based element
management interface to Nokia IP security platforms. Network Voyager is
preinstalled on the EM5400 appliance and enabled through the IPSO
operating system. With Network Voyager, you can manage, monitor, and
configure the EM5400 appliance from any authorized location within the
network by using a standard Web browser.
For information about how to access Network Voyager and the related
reference materials, see “Using Nokia Network Voyager to Manage Your
Appliance” on page 42.
The Nokia IPSO command-line interface (CLI)—an SSHv2-secured
interface that enables you to configure Nokia IP security platforms
from the command line. Everything that you can accomplish with Nokia
Voyager—to manage and configure the EM5400 appliance—you can also
do with the CLI.
For information about how to access the CLI, see the Nokia CLI
Reference Guide for the version of IPSO you are using.
Nokia Horizon Manager—a secure GUI-based software image
management application. With Horizon Manager, you can securely install
and upgrade the Nokia proprietary IPSO operating system, plus hardware
and third-party applications such as Check Point FireWall-1. Horizon
Manager can perform installations and upgrades on up to 2,500 Nokia IP
EM5400 IP Security Platform includes IP260, IP265, 50i, 50s Appliances