Nokia IP1220 - Security Appliance User manual

Part No. N450000536 Rev 001
Published June 2008
IP1220 and IP1260 Security
Platforms Installation Guide
All manuals and user guides at all-guides.com
all-guides.com

2 IP1220 and IP1260 Security Platforms Installation Guide
COPYRIGHT
©2008 Nokia. All rights reserved.
Rights reserved under the copyright laws of the United States.
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the United States Government is subject to restrictions as set forth in subparagraph
(c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of, this computer software,
the rights of the United States Government regarding its use, reproduction, and disclosure are as set forth in the
Commercial Computer Software-Restricted Rights clause at FAR 52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Inc. as is and any express or implied warranties, including, but not
limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall
Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or
consequential damages (including, but not limited to, procurement of substitute goods or services; loss of use, data, or
profits; or business interruption) however caused and on any theory of liability, whether in contract, strict liability, or tort
(including negligence or otherwise) arising in any way out of the use of this software, even if advised of the possibility of
such damage.
Nokia reserves the right to make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document are trademarks or
registered trademarks of their respective holders.
080101
All manuals and user guides at all-guides.com

IP1220 and IP1260 Security Platforms Installation Guide 3
Nokia Contact Information
Corporate Headquarters
Regional Contact Information
Nokia Customer Support
Web Site http://www.nokia.com
Telephone [phone] or
1-650-625-2000
Fax [phone]
Mail
Address
Nokia Inc.
313 Fairchild Drive
Mountain View, California
94043-2215 USA
Americas Nokia Inc.
313 Fairchild Drive
Mountain View, CA 94043-2215
USA
Tel: [phone]
Outside USA and Canada: [phone]
email: info.ipnetworking_a[email protected]
Europe, Mid-
dle East, and
Africa
Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG UK
Tel: UK: [phone]
Tel: France: [phone]
email: [e-mail]
Asia-Pacific 438B Alexandra Road
#07-00 Alexandra Technopark
Singapore 119968
Tel: [phone]
email: [e-mail]
Web Site: https://support.nokia.com/
Email: [e-mail]
Americas Europe
Voice: 1-888-361-5030 or
1-613-271-6721
Voice: [phone]
Fax: [phone] Fax: [phone]
Asia-Pacific
Voice: [phone]
Fax: [phone]
050602
All manuals and user guides at all-guides.com

4 IP1220 and IP1260 Security Platforms Installation Guide
All manuals and user guides at all-guides.com

IP1220 and IP1260 Security Platforms Installation Guide 5
Contents
About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
In this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Conventions this Guide Uses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
About the Nokia IP1200 Series Security Platform . . . . . . . . . . . . . . . . . . . . . . . . . . 17
About the Nokia IP1200 Series Flash-Based Security Platforms. . . . . . . . . . . . . . . 18
Managing the Nokia IP1200 Series Security Platform . . . . . . . . . . . . . . . . . . . . . . . 19
Nokia IP1200 Series Security Platform Overview . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Ethernet Management Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
PMC Expansion Slots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Console Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
System Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Hard-Disk Drives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Disk Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Hard-Disk Drive Hot Swap Feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Hard-Disk Drive LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Power Supplies and Fan Unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Power Supplies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Fan Unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Site Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Safety Warnings and Cautions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Software Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Product Disposal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
2 Installing the Nokia IP1200 Series Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Rack Mounting the Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
All manuals and user guides at all-guides.com

6 IP1220 and IP1260 Security Platforms Installation Guide
3 Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Using a Console Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Connecting Power and Turning the Power On . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Performing the Initial Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Connecting Network Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Using Nokia Network Voyager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Viewing Nokia IPSO Documentation by Using
Nokia Network Voyager. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Using the Command-Line Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Using Nokia Horizon Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
4 Installing and Replacing Network Interface Cards and Accelerated Data Path
(ADP) Services Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Removing, Installing, and Replacing NICs or the ADP Module . . . . . . . . . . . . . . . 50
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Configuring and Activating Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Monitoring Network Interface Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
5 About IP1200 Series Appliance Network Interface Cards . . . . . . . . . . . . . . . . . 57
Four-Port 10/100 Ethernet NICs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
10/100 Ethernet NIC Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Ethernet NIC Connectors and Cables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Two-Port and Four-Port Copper Gigabit Ethernet NICs . . . . . . . . . . . . . . . . . . . . . 60
Copper Gigabit Ethernet NIC Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Performance Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Copper Gigabit Ethernet NIC Connectors and Cables. . . . . . . . . . . . . . . . . . . . . 62
Two-Port Fiber-Optic Gigabit Ethernet NICs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Fiber-Optic Gigabit Ethernet NIC Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Fiber-Optic Gigabit Ethernet NIC Connectors and Cables. . . . . . . . . . . . . . . . . . 65
Performance Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
6 About IP1200 Appliance ADP Services Modules . . . . . . . . . . . . . . . . . . . . . . . . 67
Installing and Replacing ADP Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Nokia ADP Card LED Reference Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces . . . . . . . . . . . . . . 71
Effect on Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Nokia ADP Card Interface Names for IP1220 and IP1260 Appliances . . . . . . . . 72
Configuration Example with VRRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Deleting VRRP Configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Reconfiguring Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Reconfiguring VRRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
All manuals and user guides at all-guides.com
all-guides.com

IP1220 and IP1260 Security Platforms Installation Guide 7
7 Installing and Replacing Components Other than Network Interface Cards (NICs)
and Accelerated Data Path (ADP) Services Modules . . . . . . . . . . . . . . . . . . . . . 81
Replacing a Hard-Disk Drive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Disk Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Hard-Disk Drive Hot Swap Feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Removing and Replacing a Hard-Disk Drive . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Installing a PC Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Storing System Logs on the Flash-Memory PC Card . . . . . . . . . . . . . . . . . . . . . . 94
Disabling Flash-Memory PC Cards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Transferring Files with the Flash-Memory PC Card . . . . . . . . . . . . . . . . . . . . . . . 95
Replacing the Compact Flash Memory Card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
Replacing or Upgrading Memory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
Installing a Nokia Encryption Accelerator Card . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Configuring Software to Use Hardware Acceleration . . . . . . . . . . . . . . . . . . . . . 106
Installing a Fan Unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Installing or Replacing a Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Monitoring the Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Replacing Motherboard Batteries. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
8 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
General Troubleshooting Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
A Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Space Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
B Compliance Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Declaration of Conformity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121
Compliance Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
FCC Notice (US) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 123
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
All manuals and user guides at all-guides.com

8 IP1220 and IP1260 Security Platforms Installation Guide
All manuals and user guides at all-guides.com

IP1220 and IP1260 Security Platforms Installation Guide 9
Figures
Figure 1 Component Locations Front View . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Figure 2 Ethernet Management Ports Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Figure 3 Pin Assignments for Console and AUX Connections . . . . . . . . . . . . . . . 22
Figure 4 Nokia IP1200 Series Appliance System Status LEDs . . . . . . . . . . . . . . . 23
Figure 5 Hard-Disk Drive Front Pane . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Figure 6 Power Supply and Fan Unit Locations . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Figure 7 AC Power Supply, Cooling Fan, and Power Switch . . . . . . . . . . . . . . . . 27
Figure 8 Power Supply and Fan Unit Locations (DC version) . . . . . . . . . . . . . . . . 27
Figure 9 Rack-Mounting Screw Locations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Figure 10 Power Switch Location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Figure 11 Nokia Network Voyager Reference Access Points . . . . . . . . . . . . . . . . 45
Figure 12 Four-Port 10/100 Ethernet NIC Front Panel Details . . . . . . . . . . . . . . . 59
Figure 13 Output Connector for the Ethernet Cable . . . . . . . . . . . . . . . . . . . . . . . 60
Figure 14 Ethernet Crossover-Cable Pin Connections . . . . . . . . . . . . . . . . . . . . . 60
Figure 15 Two-Port Copper Gigabit Ethernet NIC Front Panel Details . . . . . . . . . 61
Figure 16 Four-Port Copper Gigabit Ethernet NIC Front Panel Details . . . . . . . . 61
Figure 17 Ethernet Cable Connector Output Pin Assignments . . . . . . . . . . . . . . . 63
Figure 18 Ethernet Crossover Cable Pin Connections . . . . . . . . . . . . . . . . . . . . . 63
Figure 19 PMC Two-Port Short-Range Gigabit Ethernet NIC . . . . . . . . . . . . . . . . 64
Figure 20 PMC Two-Port Long-Range Gigabit Ethernet NIC . . . . . . . . . . . . . . . . 65
Figure 21 Location of Hard-Disk Drives . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Figure 22 Slot 3 PC Card Location . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Figure 23 DIMM Socket Locations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
All manuals and user guides at all-guides.com

10 IP1220 and IP1260 Security Platforms Installation Guide
All manuals and user guides at all-guides.com

IP1220 and IP1260 Security Platforms Installation Guide 11
Tables
Table 1 Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Table 2 Nokia IP1200 Series Disk-Based Security Platform Specifics . . . . . . . . . 17
Table 3 Nokia IP1200 Series Flash-Based Security Platform Specifics . . . . . . . . 18
Table 4 PMC Expansion Slots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Table 5 Pin Assignments for DB9 and DB25 Interface Cables . . . . . . . . . . . . . . . 22
Table 6 System Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Table 7 Hard-Disk Drive LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Table 8 Power Supply Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Table 9 Nokia IP1200 Series Disk-Based Platform Software Requirements . . . . 30
Table 10 Nokia IP1200 Series Flash-Based Platform Software Requirements . . 30
Table 11 NIC PCI Frequency . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
All manuals and user guides at all-guides.com
all-guides.com

12 IP1220 and IP1260 Security Platforms Installation Guide
All manuals and user guides at all-guides.com

IP1220 and IP1260 Security Platforms Installation Guide 13
About this Guide
This manual provides information for the installation and use of the Nokia IP1200 Series
security platforms. Installation and maintenance should be performed by experienced
technicians or Nokia-approved service providers only.
This preface provides the following information:
In this Guide
Conventions this Guide Uses
Related Documentation
In this Guide
This guide is organized into the following chapters and appendixes:
Chapter 1, “Overview” presents a general overview of the Nokia IP1200 Series Security
Platform.
Chapter 2, “Installing the Nokia IP1200 Series Appliance” describes how to install the
Nokia IP1200 Series appliance.
Chapter 3, “Performing the Initial Configuration” describes how to physically connect it to a
network and to a power source and how to make the appliance available on the network.
Chapter 4, “Installing and Replacing Network Interface Cards and Accelerated Data Path
(ADP) Services Modules” describes how to install, monitor, and replace network interface
cards (NICs) and Accelerated Data Path (ADP) services modules.
Chapter 5, “About IP1200 Series Appliance Network Interface Cards” describes how to
connect to and use each of the supported NICs.
Chapter 6, “Installing and Replacing ADP Modules” describes how to connect to and use
each of the supported Accelerated Data Path (ADP) services modules.
Chapter 7, “Installing and Replacing Components Other than Network Interface Cards
(NICs) and Accelerated Data Path (ADP) Services Modules” describes how to install or
replace memory, hard-disk drives, and power supplies.
Chapter 8, “Troubleshooting” discusses problems you might encounter and proposes
solutions to these problems.
Appendix A, “Technical Specifications” provides technical specifications such as interface
characteristics.
All manuals and user guides at all-guides.com

14 IP1220 and IP1260 Security Platforms Installation Guide
Appendix B, “Compliance Information” provides compliance and regulatory information.
Conventions this Guide Uses
The following sections describe the conventions this guide uses, including notices, text
conventions, and command-line conventions.
Notices
Warning
Warnings advise the user that either bodily injury might occur because of a physical hazard,
or that damage to a structure, such as a room or equipment closet, might occur because of
equipment damage.
Caution
Cautions indicate potential equipment damage, equipment malfunction, loss of
performance, loss of data, or interruption of service.
Note
Notes provide information of special interest or recommendations.
Text Conventions
Table 1 describes the text conventions this guide uses.
Table 1 Text Conventions
Convention Description
monospace font Indicates command syntax, or represents computer or screen output,
for example:
Log error 12453
bold monospace font Indicates text you enter or type, for example:
# configure nat
Key names Keys that you press simultaneously are linked by a plus sign (+):
Press Ctrl + Alt + Del.
Menu commands Menu commands are separated by a greater than sign (>):
Choose File > Open.
All manuals and user guides at all-guides.com

Related Documentation
IP1220 and IP1260 Security Platforms Installation Guide 15
Related Documentation
You can find this guide in PDF on the Nokia support Web site (https:// support.nokia.com/) and
on the Nokia IPSO operating system CD-ROM issued with your Nokia IP1200 Series security
platform.
In addition to this guide and other documents shipped with your appliance, documentation for
this product includes the following:
Nokia Network Voyager Reference Guide for the version of Nokia IPSO you are using
CLI Reference Guide for the version of Nokia IPSO you are using
Getting Started Guide and Release Notes for the version of Nokia IPSO you are using
Nokia IPSO Boot Manager Reference Guide, which describes how to use the Nokia IPSO
boot manager
Clustering Configuration Guide for the version of Nokia IPSO you are using
Nokia Network Voyager inline help
You can find the most up-to date version of the Nokia IP1200 Series Security Platform
Installation Guide in PDF on the Nokia support site (https://support.nokia.com). You can access
inline help, the Nokia Network Voyager Reference Guide, and the CLI Reference Guide from
Nokia Network Voyager.
Check Point documentation is available from the Check Point Web site at: http://
www.checkpoint.com/
060306
The words enter and type Enter indicates that you type something and then press the Return or
Enter key.
Do not press the Return or Enter key when an instruction says type.
Italics •Emphasizes a point or denotes new terms at the place where they
are defined in the text.
•Indicates an external book title reference.
•Indicates a variable in a command:
delete interface if_name
Table 1 Text Conventions
Convention Description
All manuals and user guides at all-guides.com

3
16 IP1220 and IP1260 Security Platforms Installation Guide
All manuals and user guides at all-guides.com
all-guides.com

IP1220 and IP1260 Security Platforms Installation Guide 17
1Overview
This chapter provides an overview of the Nokia IP1200 Series security platform and the
requirements for its use. The following topics are covered:
About the Nokia IP1200 Series Security Platform
About the Nokia IP1200 Series Flash-Based Security Platforms
Managing the Nokia IP1200 Series Security Platform
Nokia IP1200 Series Security Platform Overview
Site Requirements
Safety Warnings and Cautions
Software Requirements
Product Disposal
About the Nokia IP1200 Series Security Platform
The Nokia IP1200 Series security platform combines the power of the Nokia IPSO operating
system with the Nokia Secure Access System and firewall applications. The Nokia IP1260
security platform is a high-end, multi port security platform that is ideally suited for the
enterprise data center. The Nokia IP1220 security platform is a mid-range security platform that
is ideally suited for a smaller data center. Both IP1200 Series security platforms support an
encryption accelerator card to further enhance VPN performance.
Table 2 presents specifics about the Nokia IP1200 Series disk-based security platforms.
The IP1200 Series security platform is a two-rack unit appliance that incorporates a serviceable
slide-out tray into the chassis design. The front panel of the IP1200 Series security platform has
Table 2 Nokia IP1200 Series Disk-Based Security Platform Specifics
Platform
RAM (Minimum and Maximum
Supported Configurations) Compact Flash
Nokia IP1260 Minimum: 1 GB
Maximum: 2 GB
32 MB
Nokia IP1220 Minimum: 1 GB
Maximum: 2 GB
32 MB
All manuals and user guides at all-guides.com

1Overview
18 IP1220 and IP1260 Security Platforms Installation Guide
two interface slots. A PMC carrier is provided for the interface slots. Each PMC carrier supports
two PMC network interface cards (NICs) for a total of four NICs. These network interfaces
provide exceptional data forwarding and monitoring performance when used with Nokia and
partner applications. In addition, the IP1200 Series allows you to boost performance as needed
through next-generation, high-end Nokia Accelerated Data Path (ADP) services modules and
Nokia IPSO system upgrades.
Note
PMC carriers are hot-swappable, but ADP modules are not.
The front panel of the IP1200 Series security platform also contains:
two storage device slots
two PCMCIA slots
a console port
a serial port
a four-port Ethernet management interface
The network interfaces in the external PMC slot are designated for management, monitoring,
and high-availability traffic. Partner application and operating system storage is provided on
mirrored hard-disk drives in the two storage device slots.
The IP1200 Series security platform is designed to meet other mid- to high-end availability
requirements, including port density for connections to redundant internal, external, DMZ, and
management networks. In addition, the IP1200 Series security platform provides redundant
power supplies, N + 1 cooling, and hot swapping from the storage and PMC NICs.
As a network device, the IP1200 Series security platform supports a comprehensive suite of
IP-routing functions and protocols.
The integrated router functionality eliminates the need for separate intranet and access routers in
security applications.
About the Nokia IP1200 Series Flash-Based Security
Platforms
Table 3 presents specifics about the Nokia IP1200 Series flash-based security platforms.
Table 3 Nokia IP1200 Series Flash-Based Security Platform Specifics
Platform
RAM (Minimum and Maximum
Supported Configurations) Compact Flash
Nokia IP1220 Minimum: 1 GB
Maximum: 2 GB
1 GB
Nokia IP1260 Minimum: 1 GB
Maximum: 2 GB
1 GB
All manuals and user guides at all-guides.com

Managing the Nokia IP1200 Series Security Platform
IP1220 and IP1260 Security Platforms Installation Guide 19
Note
The IP1220 and IP1260 model numbers are used for both disk-based and flash-based
security platforms.
For information on how to configure the Nokia IP1200 flash-based security platforms, see the
Nokia IP1200 Security Platform Flash-Based Configuration Guide.
Managing the Nokia IP1200 Series Security Platform
You can manage the Nokia IP1200 Series security platform by using the following interfaces:
Nokia Network Voyager—an SSL-secured, Web-based element management interface to
Nokia IP security platforms. Network Voyager is preinstalled on the IP1200 Series security
platform and enabled through the Nokia IPSO operating system. With Network Voyager,
you can manage, monitor, and configure the IP1200 Series security platform from any
authorized location within the network by using a standard Web browser. Use one of the four
Ethernet management ports to access the Network Voyager interface.
For information about how to access Network Voyager and the related reference materials,
see “Using Nokia Network Voyager” on page 44.
The Nokia IPSO command-line interface (CLI)—an SSHv2-secured interface that
enables you to easily configure Nokia IP security platforms from the command line.
Everything that you can accomplish with Network Voyager—manage, monitor, and
configure the IP1200 Series security platform —you can also do with the CLI.
For information about how to access the CLI, see the Nokia CLI Reference Guide for Nokia
IPSO v3.6 or later.
Nokia Horizon Manager—a secure GUI-based software image management application.
With Horizon Manager, you can securely install and upgrade the Nokia proprietary Nokia
IPSO operating system, plus hardware and third-party applications such as Check Point
VPN-1. Horizon Manager can perform installations and upgrades on up to 2,500 Nokia IP
security platforms, offering administrators the most rapid and dependable method to
perform Check Point application upgrades.
For information about how to obtain Horizon Manager, contact your Nokia solution provider
or see the “Nokia Contact Information” on page 3.
Nokia IP1200 Series Security Platform Overview
Figure 1 shows the component locations for the Nokia IP1200 Series security platform.
All manuals and user guides at all-guides.com

1Overview
20 IP1220 and IP1260 Security Platforms Installation Guide
Figure 1 Component Locations Front View
Ethernet Management Ports
The Ethernet management ports are located in slot 3. Figure 2 shows the layout of the Ethernet
management ports and link LEDs. The top link LED represents the left-most port (port 1). The
remaining LEDs represent the remaining ports from top to bottom and left to right.
Note
The Ethernet management ports are intended for management purposes. These ports do
not provide the same performance as Ethernet cards in the PMC slots.
Figure 2 Ethernet Management Ports Details
Caution
Cables that connect to the Ethernet NIC must be IEEE 802.3 compliant to prevent
potential data loss.
00307a.3
Dual 6U PMC carrier or
ADP module
expansion slots 1 and 2
Console port
System status LEDs
PCMCIA slots Ethernet management
ports (slot 3)
Serial (AUX) port
hard-disk drive A
hard-disk drive B
Grounding plug
00120a
RJ-45 connectors
LInk LEDs (green)
Port 1 Port 2 Port 3 Port 4
All manuals and user guides at all-guides.com