Nokia IP200 Series User manual

Part No. N451435002 Rev A
Published January 2006
Nokia IP200 Series
Security Platform
Installation Guide

2 Nokia IP200 Series Security Platform Installation Guide
COPYRIGHT
©2006 Nokia. All rights reserved.
Rights reserved under the copyright laws of the United States.
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the United States Government is subject to restrictions as set
forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of,
this computer software, the rights of the United States Government regarding its use,
reproduction, and disclosure are as set forth in the Commercial Computer Software-Restricted
Rights clause at FAR 52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Inc. as is and any express or implied
warranties, including, but not limited to, implied warranties of merchantability and fitness for a
particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or
suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential
damages (including, but not limited to, procurement of substitute goods or services; loss of use,
data, or profits; or business interruption) however caused and on any theory of liability, whether in
contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use
of this software, even if advised of the possibility of such damage.
Nokia reserves the right to make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document
are trademarks or registered trademarks of their respective holders.
060101

Nokia IP200 Series Security Platform Installation Guide 3
Nokia Contact Information
Corporate Headquarters
Regional Contact Information
Nokia Customer Support
Web Site http://www.nokia.com
Telephone [phone] or
1-650-625-2000
Fax [phone]
Mail
Address Nokia Inc. 313 Fairchild Drive
Mountain View, California
94043-2215 USA
Americas Nokia Inc.
313 Fairchild Drive
Mountain View, CA 94043-2215
USA
Tel: [phone]
Outside USA and Canada: [phone]
email: [email protected]
Europe,
Middle East,
and Africa
Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG UK
Tel: UK: [phone]
Tel: France: [phone]
email: [email protected]
Asia-Pacific 438B Alexandra Road
#07-00 Alexandra Technopark
Singapore 119968
Tel: [phone]
email: [email protected]
Web Site: https://support.nokia.com/
Email: [email protected]
Americas Europe
Voice: 1-888-361-5030 or
1-613-271-6721 Voice: [phone]
Fax: [phone] Fax: [phone]
Asia-Pacific
Voice: [phone]
Fax: [phone]
050602

4 Nokia IP200 Series Security Platform Installation Guide

Nokia IP200 Series Security Platform Installation Guide 5
Contents
About this Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
In This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Conventions This Guide Uses . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Command-Line Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
About the Nokia IP200 Security Platform. . . . . . . . . . . . . . . . . . . . 19
Nokia IP200 Security Platform Appliance Overview. . . . . . . . . . . . 20
Built-in Ethernet Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Console and Serial (AUX) Ports . . . . . . . . . . . . . . . . . . . . . . . . . 22
System Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Site Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Product Disposal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Safety Warnings and Cautions. . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Managing IP200 Security Platform Appliances . . . . . . . . . . . . . . . 28
2 Installing a Nokia IP200 Security Appliance . . . . . . . . . . . . . . . 31
Rack Mounting a Single Nokia IP200 Appliance. . . . . . . . . . . . . 31
Rack Mounting Two Nokia IP200 Appliances Side by Side . . . . 33

6 Nokia IP200 Series Security Platform Installation Guide
3 Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . 39
Using a Console Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Connecting Power and Turning the Power On. . . . . . . . . . . . . . . . 41
Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . 43
Connecting Network Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Using Nokia Network Voyager to Manage Your Appliance . . . . . . 46
Viewing Nokia IPSO Documentation by Using
Nokia Network Voyager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Using the Command-Line Interface to Manage Your Appliance . . 48
Using Nokia Horizon Manager. . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
4 Connecting to the Ethernet Ports . . . . . . . . . . . . . . . . . . . . . . . 51
Built-In Four-Port 10/100 Ethernet Interface . . . . . . . . . . . . . . . . . 51
Ethernet Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Connecting to Ethernet Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
5 Configuring and Activating Encryption Acceleration . . . . . . . 55
Configuring and Activating Nokia Encryption Acceleration . . . . . . 55
Configuring Software to Use Hardware Acceleration. . . . . . . . . . . 56
6 Installing Flash-Memory PC Cards . . . . . . . . . . . . . . . . . . . . . . 57
Before You Begin. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Installing a Flash-Memory PC Card. . . . . . . . . . . . . . . . . . . . . . . . 59
Storing System Logs on the Flash-Memory PC Card . . . . . . . . . . 59
Transferring Files with the Flash-Memory PC Card. . . . . . . . . . . . 61

Nokia IP200 Series Security Platform Installation Guide 7
7 Using the Nokia IPSO Boot Manager . . . . . . . . . . . . . . . . . . . . . 63
Starting the Boot-Manager Command-Line Interface. . . . . . . . . . . 65
Stopping the System from the Boot Manager . . . . . . . . . . . . . . . . 66
Using the Boot Manager to Boot the System. . . . . . . . . . . . . . . . . 66
Setting and Viewing Boot-Manager Variables . . . . . . . . . . . . . . . . 67
Viewing Other System Information . . . . . . . . . . . . . . . . . . . . . . . 71
Protecting the Boot Manager with a Password . . . . . . . . . . . . . . . 72
Resetting the Admin Password . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Reinstalling or Upgrading the Boot Manager . . . . . . . . . . . . . . . . . 76
Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
8 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
General Troubleshooting Information. . . . . . . . . . . . . . . . . . . . . . . 81
A Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Physical Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Space Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Other Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Appliance Interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
B Compliance Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Declaration of Conformity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Compliance Statements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
FCC Notice (US) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

8 Nokia IP200 Series Security Platform Installation Guide

Nokia IP200 Series Security Platform Installation Guide 9
Tables
Table 1 Command-Line Conventions . . . . . . . . . . . . . . . . . . . . . 15
Table 2 Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Table 3 Pin Assignments for DB9 and DB25 Interface Cables . . 24
Table 4 Appliance Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Table 5 Boot Manager Variables . . . . . . . . . . . . . . . . . . . . . . . . . 67
Table 6 Boot Flags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68

10 Nokia IP200 Series Security Platform Installation Guide

Nokia IP200 Series Security Platform Installation Guide 11
Figures
Figure 1 Component Locations Front View . . . . . . . . . . . . . . . . . 20
Figure 2 Component Locations Rear View . . . . . . . . . . . . . . . . . 21
Figure 3 Built-In Ethernet Interface Front Panel Details . . . . . . . 21
Figure 4 Pin Assignments for Console and AUX Connections . . 23
Figure 5 Appliance Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . 25
Figure 6 Installing the Mounting Brackets . . . . . . . . . . . . . . . . . . 32
Figure 7 Single Appliance Installation . . . . . . . . . . . . . . . . . . . . . 33
Figure 8 Power Switch Location . . . . . . . . . . . . . . . . . . . . . . . . . 42
Figure 9 Nokia Network Voyager Reference Access Points . . . . 47
Figure 10 Output Connector for the Ethernet Cable . . . . . . . . . . 53
Figure 11 Ethernet Crossover Cable Pin Connections . . . . . . . . 54
Figure 12 Inserting a Flash-Memory PC Card . . . . . . . . . . . . . . . 58

12 Nokia IP200 Series Security Platform Installation Guide

Nokia IP200 Series Security Platform Installation Guide 13
About this Guide
This guide provides information for the installation and use of the Nokia
IP200 Series security platform, which consists of the Nokia IP260 and Nokia
IP265 appliances. Installation and maintenance should be performed by
experienced technicians or Nokia-approved service providers only.
This preface provides the following information:
In This Guide
Conventions This Guide Uses
Related Documentation
In This Guide
This guide is organized into the following chapters and appendixes:
Chapter 1, “Overview” presents a general overview of the Nokia IP200
Security Platform.
Chapter 2, “Installing a Nokia IP200 Security Appliance” explains how to
rack mount the appliance and how to physically connect it to a network
and power.
Chapter 3, “Performing the Initial Configuration” explains how to make
the appliance available on the network.
Chapter 4, “Connecting to the Ethernet Ports” describes how to connect to
the supported Ethernet ports.

14 Nokia IP200 Series Security Platform Installation Guide
Chapter 5, “Configuring and Activating Encryption Acceleration”
describes how to configure and activate the built-in encryption
acceleration feature.
Chapter 6, “Installing Flash-Memory PC Cards” explains how to install or
replace ATA flash-memory PC cards in your IP200 appliance.
Chapter 7, “Using the Nokia IPSO Boot Manager” explains how to use
the boot manager, which is part of the Nokia IPSO software.
Chapter 8, “Troubleshooting” discusses problems you might encounter
and proposes solutions to these problems.
Appendix A, “Technical Specifications” gives technical specifications
such as interface characteristics.
Appendix B, “Compliance Information” includes compliance and
regulatory information.
Conventions This Guide Uses
The following sections describe the conventions this guide uses, including
notices, text conventions, and command-line conventions.
Notices
Warning
Warnings advise the user that bodily injury might occur because of a
physical hazard.
Caution
Cautions indicate potential equipment damage, equipment
malfunction, loss of performance, loss of data, or interruption of
service.

Conventions This Guide Uses
Nokia IP200 Series Security Platform Installation Guide 15
Note
Notes provide information of special interest or recommendations.
Command-Line Conventions
This section defines the elements of commands that are available in Nokia
Internet Communications products. You might encounter one or more of the
following elements in a command-line path.
Table 1 Command-Line Conventions
Convention Description
command A user-generated instruction typically sent using a console
or terminal. The command statement and its associated
syntax must be entered exactly as shown in lowercase
letters.
italics Indicates a variable in a command that you must supply. For
example:
delete interface if_name
Supply an interface name in place of the variable. For
example:
delete interface nic1
angle brackets < > Indicates arguments for which you must supply a value:
retry-limit <1–100>
Supply a value. For example:
retry-limit 60

16 Nokia IP200 Series Security Platform Installation Guide
Text Conventions
Table 2 describes the text conventions this guide uses.
-flag A flag is usually an abbreviation for a function, menu, or
option name, or for a compiler or preprocessor argument.
You must enter a flag exactly as shown, including the
preceding hyphen.
.ext A filename extension, such as .ext, might follow a variable
that represents a filename. Type this extension exactly as
shown, immediately after the name of the file. The extension
might be optional in certain products.
( . , ; + * - / ) Punctuation and mathematical notations are literal symbols
that you must enter exactly as shown.
Table 1 Command-Line Conventions (continued)
Convention Description
Table 2 Text Conventions
Convention Description
monospace font Indicates command syntax, or represents computer or
screen output, for example:
Log error 12453
bold monospace font Indicates text you enter or type, for example:
# configure nat
Key names Keys that you press simultaneously are linked by a
plus sign (+):
Press Ctrl + Alt + Del.
Menu commands Menu commands are separated by a greater than
sign (>):
Choose File > Open.

Related Documentation
Nokia IP200 Series Security Platform Installation Guide 17
Related Documentation
You can find this guide in PDF on the Nokia support Web site (https://
support.nokia.com/).
In addition to this guide, documentation for this product includes the
following:
Getting Started Guide and Release Notes for the version of IPSO you are
using
Nokia Network Voyager Reference Guide for the version of IPSO you are
using
CLI Reference Guide for the version of IPSO you are using
Nokia Network Voyager inline help
You can access the Nokia Voyager inline help, the Nokia Network Voyager
Reference Guide, and the CLI Reference Guide for the version of IPSO you
are using from the Nokia Voyager application.
Check Point documentation is available from the Check Point Web site at
http://www.checkpoint.com. You can also order Check Point documentation
from Nokia or download it from the Nokia support site at https://
support.nokia.com.
The words enter and type Enter indicates you type something and then press
the Return or Enter key.
Do not press the Return or Enter key when an
instruction says type.
Italics •Emphasizes a point or denotes new terms at the
place where they are defined in the text.
•Indicates an external book title reference.
•Indicates a variable in a command:
delete interface if_name
Table 2 Text Conventions (continued)
Convention Description

18 Nokia IP200 Series Security Platform Installation Guide

Nokia IP200 Series Security Platform Installation Guide 19
1Overview
This chapter provides an overview of the Nokia IP200 Security Platform and
the requirements for using the IP200 appliances. The following topics are
covered:
About the Nokia IP200 Security Platform on page 19
Nokia IP200 Security Platform Appliance Overview on page 20
Site Requirements on page 26
Safety Warnings and Cautions on page 27
Product Disposal on page 26
Managing IP200 Security Platform Appliances on page 28
About the Nokia IP200 Security Platform
The Nokia IP200 Security Platform combines the power of Nokia IPSO
software with your choice of firewall and VPN applications.
The IP200 platform provides built-in hardware-based encryption acceleration.
The IP200 appliances are ideally suited for growing companies and satellite
offices that want high-performance IP routing combined with the
industry-leading Check Point VPN-1/FireWall-1 enterprise security suite. The
small size of the IP200 appliances makes them ideal for installations that need
to conserve space.

1Overview
20 Nokia IP200 Series Security Platform Installation Guide
As network devices, the IP200 appliances support a comprehensive suite of
IP-routing functions and protocols, including RIPv1/RIPv2, IGRP, OSPF and
BGP4 for unicast traffic, and DVMRP for multicast traffic. The integrated
router functionality eliminates the need for separate intranet and access
routers in security applications.
For more information and technical specifications, see “Technical
Specifications” on page 87.
Nokia IP200 Security Platform Appliance
Overview
The following figures show component locations for Nokia IP200 appliances.
Figure 1 Component Locations Front View
00024
IP260
Built-in Ethernet ports
(10/100 Mbps)
Status LEDs Auxiliary (AUX) port
PCMCIA slots
Reset switch
Console port