Nokia IP560 - Hard Disk Drive Based User manual

Part No. N450000014 Rev 001
Published December, 2005
IP560 Security Platform
Installation Guide

2 IP560 Security Platform Installation Guide
COPYRIGHT
©2005 Nokia. All rights reserved.
Rights reserved under the copyright laws of the United States.
RESTRICTED RIGHTS LEGEND
Use, duplication, or disclosure by the United States Government is subject to restrictions as set
forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at
DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany the delivery of,
this computer software, the rights of the United States Government regarding its use,
reproduction, and disclosure are as set forth in the Commercial Computer Software-Restricted
Rights clause at FAR 52.227-19.
IMPORTANT NOTE TO USERS
This software and hardware is provided by Nokia Inc. as is and any express or implied
warranties, including, but not limited to, implied warranties of merchantability and fitness for a
particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or
suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential
damages (including, but not limited to, procurement of substitute goods or services; loss of use,
data, or profits; or business interruption) however caused and on any theory of liability, whether in
contract, strict liability, or tort (including negligence or otherwise) arising in any way out of the use
of this software, even if advised of the possibility of such damage.
Nokia reserves the right to make changes without further notice to any products herein.
TRADEMARKS
Nokia is a registered trademark of Nokia Corporation. Other products mentioned in this document
are trademarks or registered trademarks of their respective holders.
050110

IP560 Security Platform Installation Guide 3
Nokia Contact Information
Corporate Headquarters
Regional Contact Information
Nokia Customer Support
Web Site http://www.nokia.com
Telephone [phone] or
1-650-625-2000
Fax [phone]
Mail
Address
Nokia Inc.
313 Fairchild Drive
Mountain View, California
94043-2215 USA
Americas Nokia Inc.
313 Fairchild Drive
Mountain View, CA 94043-2215
USA
Tel: [phone]
Outside USA and Canada: [phone]
email: info.ipnetworking_america[email protected]
Europe,
Middle East,
and Africa
Nokia House, Summit Avenue
Southwood, Farnborough
Hampshire GU14 ONG UK
Tel: UK: [phone]
Tel: France: [phone]
email: [e-mail]
Asia-Pacific 438B Alexandra Road
#07-00 Alexandra Technopark
Singapore 119968
Tel: [phone]
email: [email protected]
Web Site: https://support.nokia.com/
Email: tac.suppor[email protected]
Americas Europe
Voice: 1-888-361-5030 or
1-613-271-6721
Voice: [phone]
Fax: [phone] Fax: [phone]
Asia-Pacific
Voice: [phone]
Fax: [phone]
050602

4 IP560 Security Platform Installation Guide

IP560 Security Platform Installation Guide 5
Contents
About This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
In This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Conventions This Guide Uses . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Notices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Command-Line Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Related Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
1 Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
About the Nokia IP560 Security Platform . . . . . . . . . . . . . . . . . . . . 19
Managing the Nokia IP560 Security Platform. . . . . . . . . . . . . . . . . 21
Nokia IP560 Security Platform Overview . . . . . . . . . . . . . . . . . . . . 22
Four-Port 10/100/1000 Ethernet NIC . . . . . . . . . . . . . . . . . . . . . 23
PMC Expansion Slots . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Console Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Auxiliary Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
System Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Logging Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Using Hard-Disk Drives for Logging . . . . . . . . . . . . . . . . . . . . . . 29
Using PC Card for Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Power Supply and Fan Unit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Fan Unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Site Requirements, Warnings, and Cautions . . . . . . . . . . . . . . . . . 33
Software Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Product Disposal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

6 IP560 Security Platform Installation Guide
2 Installing the Nokia IP560 Appliance . . . . . . . . . . . . . . . . . . . . . 37
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Rack-Mounting the Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
3 Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . 45
Using a Console Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Connecting Power and Turning the Power On. . . . . . . . . . . . . . . . 47
Performing the Initial Configuration . . . . . . . . . . . . . . . . . . . . . . . . 49
Connecting Network Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Using Nokia Network Voyager to Manage Your Security Platform 52
Accessing Nokia Network Voyager Reference Information. . . . . 53
Nokia Network Voyager Reference Guide . . . . . . . . . . . . . . . . 53
Nokia Network Voyager Inline Help . . . . . . . . . . . . . . . . . . . . . 54
Using Nokia Network Voyager to Monitor a
Nokia IP560 Security Platform . . . . . . . . . . . . . . . . . . . . . . . . . 54
Using the Command-Line Interface . . . . . . . . . . . . . . . . . . . . . . . . 54
Using Nokia Horizon Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
4 Installing and Replacing Network Interface Cards . . . . . . . . . 57
Deactivating Configured Interfaces . . . . . . . . . . . . . . . . . . . . . . . . 58
Installing NICs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Configuring and Activating Interfaces . . . . . . . . . . . . . . . . . . . . . . 64
Monitoring Network Interface Cards. . . . . . . . . . . . . . . . . . . . . . . . 65
5 Connecting PMC Network Interface Cards . . . . . . . . . . . . . . . . 67
Four-Port 10/100 Ethernet NIC . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
10/100 Ethernet NIC Features . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Ethernet NIC Connectors and Cables. . . . . . . . . . . . . . . . . . . . . 70
Four-Port and Two-Port Copper Gigabit Ethernet NIC
(10/100/1000) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Copper Gigabit Ethernet NIC Features in the IP560. . . . . . . . . . 71

IP560 Security Platform Installation Guide 7
Copper Gigabit Ethernet NIC Connectors and Cables . . . . . . . . 74
Two-Port Fiber-Optic Gigabit Ethernet NIC . . . . . . . . . . . . . . . . . . 76
Multi-Mode Fiber-Optic Gigabit Ethernet NIC Features . . . . . . . 77
Fiber-Optic Gigabit Ethernet NIC Connectors and Cables . . . . . 78
6 Using the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Viewing the Variables and Other System Parameters . . . . . . . . 81
printenv. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
sysinfo . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
ls. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Setting the Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
setenv. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
unsetenv . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
set-defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
setalias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
unsetalias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Other commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
halt . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Booting the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Using the Boot Manager to Install Nokia IPSO . . . . . . . . . . . . . . . 88
Protecting the Boot Manager with a Password . . . . . . . . . . . . . . . 89
Installing the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Upgrading the Boot Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
7 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
General Troubleshooting Information. . . . . . . . . . . . . . . . . . . . . . . 93
Troubleshooting Routing Problems . . . . . . . . . . . . . . . . . . . . . . . 103

8 IP560 Security Platform Installation Guide
8 Replacing Other Components . . . . . . . . . . . . . . . . . . . . . . . . . 109
Replacing the Compact Flash Memory Card . . . . . . . . . . . . . . . . 110
Installing and Using a PC Card . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Installing a Hard-Disk Drive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Replacing or Upgrading Memory . . . . . . . . . . . . . . . . . . . . . . . . . 124
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126
Replacing a Nokia Encryption Accelerator Card . . . . . . . . . . . . . 130
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
Configuring Software to Use Hardware Acceleration . . . . . . . . 137
Replacing a Fan Unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138
Replacing a Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
Monitoring the IP560 Appliance Power Supply . . . . . . . . . . . . . 142
Replacing the Battery. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143
A Technical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
Space Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
B Compliance Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
Declaration of Conformity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
Compliance Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
FCC Notice (US) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154

IP560 Security Platform Installation Guide 9
List of Figures
Figure 1 Component Locations Front View . . . . . . . . . . . . . . . . . 23
Figure 2 Four-Port 10/100/1000 Ethernet PMC Details . . . . . . . 24
Figure 3 Pin Assignments for Console Connector and Console
Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Figure 4 Pin Assignments for Auxiliary Connector and Modem
Cable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Figure 5 Nokia IP560 Security Platform System Status LEDs . . 28
Figure 6 Location of the PCMCIA PC Card Slot . . . . . . . . . . . . . 30
Figure 7 Power Supply and Fan Unit Locations . . . . . . . . . . . . . 31
Figure 8 Power Supply, Cooling Fan, and Power Switch
Locations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Figure 9 Fan Unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Figure 10 Rack-Mounting Screw Locations . . . . . . . . . . . . . . . . . 38
Figure 11 Power Switch Location . . . . . . . . . . . . . . . . . . . . . . . . 47
Figure 12 Nokia Network Voyager Reference Access Points
Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Figure 13 Four-Port 10/100 Ethernet NIC Front Panel Details . . 69
Figure 14 Output Connector for the Ethernet Cable . . . . . . . . . . 70
Figure 15 Ethernet Crossover-Cable Pin Connections . . . . . . . . 71
Figure 16 Four-Port Copper Gigabit Ethernet NIC Front Panel
Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Figure 17 Two-Port Copper Gigabit Ethernet NIC Front Panel
Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

10 IP560 Security Platform Installation Guide
Figure 18 Gigabit Ethernet Cable Connector Output Pin
Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Figure 19 Gigabit Ethernet Crossover Cable Pin Connections . . 76
Figure 20 Two-Port Fiber-Optic Gigabit Ethernet NIC Front Panel
Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Figure 21 Compact Flash Memory Card Slot . . . . . . . . . . . . . . 110
Figure 22 External PC Card Location . . . . . . . . . . . . . . . . . . . . 114
Figure 23 Location of Hard-Disk Drive on Chassis Tray
Assembly . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
Figure 24 DIMM Socket Locations . . . . . . . . . . . . . . . . . . . . . . 125
Figure 25 Power Supply Location . . . . . . . . . . . . . . . . . . . . . . . 140

IP560 Security Platform Installation Guide 11
List of Tables
Table 1 Command-Line Conventions . . . . . . . . . . . . . . . . . . . . . 15
Table 2 Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Table 3 Nokia IP560 Security Platform Specifics . . . . . . . . . . . . 20
Table 4 PMC Expansion Slots . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Table 5 System Status LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Table 6 Power Supply Status LEDs . . . . . . . . . . . . . . . . . . . . . . 32
Table 7 NIC PCI Frequency . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Table 8 Boot Manager Variables . . . . . . . . . . . . . . . . . . . . . . . . . 80

12 IP560 Security Platform Installation Guide

IP560 Security Platform Installation Guide 13
About This Guide
This manual provides information for the installation and use of the Nokia
IP560 security platforms. Installation and maintenance should be performed
by experienced technicians or Nokia-approved service providers only.
This preface provides the following information:
In This Guide
Conventions This Guide Uses
Related Documentation
In This Guide
This guide is organized into the following chapters and appendixes:
Chapter 1, “Overview” presents a general overview of the Nokia IP560
security platform.
Chapter 2, “Installing the Nokia IP560 Appliance” describes how to rack-
mount the appliance.
Chapter 3, “Performing the Initial Configuration” describes how to
physically connect the Nokia IP560 security platform to a network and to
a power source and how to make the security platform available on the
network.
Chapter 4, “Installing and Replacing Network Interface Cards” describes
how to install, monitor, and replace network interface cards (NICs).

14 IP560 Security Platform Installation Guide
Chapter 5, “Connecting PMC Network Interface Cards” describes how to
connect to and use each of the supported NICs.
Chapter 6, “Using the Boot Manager” describes how to use the boot
manager, which is part of the IPSO software.
Chapter 7, “Troubleshooting” discusses problems you might encounter
and proposes solutions to these problems.
Chapter 8, “Replacing Other Components” describes how to install or
replace memory, hard disk drives, the fan unit, power supply, battery,
compact flash memory card, PC card, and the Nokia encryption
accelerator card.
Appendix A, “Technical Specifications” provides technical specifications
such as interface characteristics.
Appendix B, “Compliance Information” provides compliance and
regulatory information.
Conventions This Guide Uses
The following sections describe the conventions this guide uses, including
notices, text conventions, and command-line conventions.
Notices
Warning
Warnings advise the user that either bodily injury might occur because of
a physical hazard, or that damage to a structure, such as a room or
equipment closet, might occur because of equipment damage.

Conventions This Guide Uses
IP560 Security Platform Installation Guide 15
Caution
Cautions indicate potential equipment damage, equipment
malfunction, loss of performance, loss of data, or interruption of
service.
Note
Notes provide information of special interest or recommendations.
Command-Line Conventions
This section defines the elements of commands that are available in Nokia
Network Security Solutions products. You might encounter one or more of the
following elements on a command-line path.
Table 1 Command-Line Conventions
Convention Description
command This required element is usually the product name or other short
word that invokes the product or calls the compiler or preprocessor
script for a compiled Nokia product. It might appear alone or
precede one or more options. You must spell a command exactly
as shown and use lowercase letters.
Italics Indicates a variable in a command that you must supply. For
example:
delete interface if_name
Supply an interface name in place of the variable. For example:
delete interface nic1

16 IP560 Security Platform Installation Guide
angle brackets < > Indicates arguments for which you must supply a value:
retry-limit <1–100>
Supply a value. For example:
retry-limit 60
Square brackets [ ] Indicates optional arguments.
delete [slot slot_num]
For example:
delete slot 3
Vertical bars, also called a
pipe (|)
Separates alternative, mutually exclusive elements.
framing <sonet | sdh>
To complete the command, supply the value. For example:
framing sonet
or
framing sdh
-flag A flag is usually an abbreviation for a function, menu, or option
name, or for a compiler or preprocessor argument. You must enter
a flag exactly as shown, including the preceding hyphen.
.ext A filename extension, such as .ext, might follow a variable that
represents a filename. Type this extension exactly as shown,
immediately after the name of the file. The extension might be
optional in certain products.
( . , ; + * - / ) Punctuation and mathematical notations are literal symbols that
you must enter exactly as shown.
' ' Single quotation marks are literal symbols that you must enter as
shown.
Table 1 Command-Line Conventions (continued)
Convention Description

Related Documentation
IP560 Security Platform Installation Guide 17
Text Conventions
Table 2 describes the text conventions this guide uses.
Related Documentation
You can find this guide in PDF on the Nokia support Web site (https://
support.nokia.com/) and on the Nokia IPSO operating system CD-ROM
issued with your Nokia IP560 security platform.
Table 2 Text Conventions
Convention Description
monospace font Indicates command syntax, or represents computer or screen
output, for example:
Log error 12453
bold monospace font Indicates text you enter or type, for example:
# configure nat
Key names Keys that you press simultaneously are linked by a plus sign (+):
Press Ctrl + Alt + Del.
Menu commands Menu commands are separated by a greater than sign (>):
Choose File > Open.
The words enter and type Enter indicates you type something and then press the Return or
Enter key.
Do not press the Return or Enter key when an instruction says
type.
Italics •Emphasizes a point or denotes new terms at the place where
they are defined in the text.
•Indicates an external book title reference.
•Indicates a variable in a command:
delete interface if_name

18 IP560 Security Platform Installation Guide
In addition to this guide, documentation for this product includes the
following:
Getting Started Guide and Release Notes for the version of Nokia IPSO
you are using
Nokia Network Voyager Reference Guide
Nokia Network Voyager inline help
Nokia IP Security Platform Quick Setup Guide
Clustering Configuration Guide for the version of IPSO you are using
You can access the Network Voyager inline help and the Nokia Network
Voyager Reference Guide from the Network Voyager application.
To access inline help for a specific subject, click Help next to the subject.
To access the Nokia Network Voyager Reference Guide for tasks, examples,
and more information, click Doc.
Check Point documentation is available from the Check Point Web site at:
http://www.checkpoint.com/

IP560 Security Platform Installation Guide 19
1Overview
This chapter provides an overview of the Nokia IP560 security platform and
the requirements for its use. The following topics are covered:
About the Nokia IP560 Security Platform
Managing the Nokia IP560 Security Platform
Nokia IP560 Security Platform Overview
Logging Options
Site Requirements, Warnings, and Cautions
Software Requirements
Product Disposal
About the Nokia IP560 Security Platform
The Nokia IP560 security platform combines the power of the Nokia IPSO
operating system with the Check Point VPN-1/FW-1 firewall application. The
Nokia IP560 security platform is a high-end, multi-port security platform that
is ideally suited for the enterprise data center.
Table 3 presents specifics about the IP560.

1Overview
20 IP560 Security Platform Installation Guide
The IP560 is a one rack-unit appliance that incorporates a serviceable slide-
out tray into the chassis design. In its base configuration, the IP560 consists
of:
Solid state IDE compact flash storage, which stores the IPSO operating
system
1 GB system RAM
AC power supply
Fan unit
Encryption acceleration card to further enhance VPN performance
The front panel of the IP560 security platform contains:
Four PMC slots for network interfaces cards (NICs), including:
a single-slot PCMCIA PMC option slot in slot 3
a four-port Ethernet 10/100/1000 interface in slot 4
A console port
An auxiliary port
Front-panel reset button
Note
Any slot can be used for an Ethernet NIC. The PCMCIA PC card carrier
that comes preinstalled in slot 3 is removable; slot 3 can accept a Nokia-
approved NIC.
The network interfaces provide exceptional data forwarding and monitoring
performance when used with Nokia and partner applications. The network
Table 3 Nokia IP560 Security Platform Specifics
IP security
platform IPSO version Software
Initial memory
Configuration
Upgradeable
RAM
IP560 v4.0.1 or later Check Point VPN-1/FW-1 1 GB 2 GB