Page 1
HP TippingPoint TippingPoint 10/1 10/330 Hardware Installation and Safety Guide Abstract This document describes safety guidelines and procedures for hardware installation for the TippingPoint 10, TippingPoint 110, and TippingPoint 330. *5998-2868* 5998-2868 Part number: 5998-2868 Edition: October 2013...
Page 2
Hewlett-Packard. The information is provided “as is” without warranty of any kind and is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services.
About This Guide Explains intended audience, where related information is located, and how to obtain customer support. Overview Welcome to the HP TippingPoint N-Platform Hardware Installation and Safety Guide. This section includes the following items: • ”Target Audience” on page 5 •...
Convention Element Figure 1 Cross-reference links and e-mail addresses Medium blue text: Web site addresses Medium blue, underlined text http://www.hp.com Bold font • Key names • Text typed into a GUI element, such as into a box • GUI elements that are clicked or selected, such as menu and list items, buttons, and check boxes.
Log on to the TippingPoint Threat Management Center (TMC) with your HP Passport credentials. NOTE: If you don’t have HP Passport (HPP) credentials, access the TMC and on the Login page, select the New User Registration option to register for login credentials. If you are an existing registered TMC user and you have not updated your TMC account to an HPP account, you must log on using your email address registered on the TMC and reset your password.
System Overview The TippingPoint system is a high-speed, comprehensive security system that includes the Intrusion Prevention System (IPS), Local Security Manager (LSM), Digital Vaccine™, the Security Management System Appliance , and the Core Controller. Overview Enterprise security schemes once consisted of a conglomeration of disparate, static devices from multiple vendors.
Security Management System (SMS) The SMS core components include: • SMS Secure Server —hardware appliance for managing multiple devices • SMS Home Page — web-based interface with links to current Client software, documentation, and the Threat Management Center • SMS Management Client — Java-based application for Windows or Linux workstations used to manage your TippingPoint system •...
• Apple • Red Hat Linux • One of the following browsers: • Microsoft Internet Explorer, version 6.0 or higher • Firefox • Safari The SMS features a policy-based operational model for scalable and uniform enterprise management. It enables behavior and performance analysis with trending reports, correlation and real-time graphs - including reports on all, specific, and top attacks and their sources and destinations as well as all, specific, and top peers and filters for misuse and abuse (peer-to-peer piracy) attacks.
Core Controller The TippingPoint Core Controller is a hardware-based device that enables inspection of up to 20 Gbps of traffic by sending the traffic to as many as 24 IPS device segments. The CoreController can control traffic across its three 10GbE network segment pairs and across multiple TippingPoint E-Series IPS devices. IPS devices are connected by 1GbE uplinks, and each packet that is received on a 10GbE CoreController interface passes through a load balancer that then determines the IPS connection to use for transmitting the packet.
by the number of filters installed, the highly-scalable capacity of the hardware engine allows thousands of filters to run simultaneously with no impact on performance or accuracy. Threat Management Center The Threat Management Center (TMC) is a centralized service center that monitors global threats and distributes up-to-date attack filter packages, software updates, and product documentation.
• ”Unpack the Product” on page 12 Safety and Compliance Requirements For detailed regulatory compliance information, refer to the HP TippingPoint Hardware Safety and Compliance Guide, available on the TMC and included with your product. Safety Guidelines and Warnings Before you start the installation procedures, read this entire section for important information and safety warnings.
CAUTION: The equipment rack must be anchored to an unmovable support to prevent it from falling over when one or more servers are extended in front of it on slide assemblies. The equipment rack must be installed according to the manufacturer’s instructions. You must also consider the weight of any other device installed in the rack.
Page 17
WARNING! This unit is intended for installation in restricted access areas only. WARNING! This product requires short-circuit (overcurrent) protection, to be provided as part of the building installation. Install only in accordance with national and local wiring regulations. WARNING! Do not work on the system or connect or disconnect cables during periods of lightning activity.
WARNING! The ports on the front of the product are Safety Extra-Low Voltage (SELV) circuits. SELV circuits should only be connected to other SELV circuits. WARNING! This product might have more than one power supply source. All power sources must be removed to de-energize the unit.
Environmental Requirements For the product to run properly, your environment must meet the proper criteria. The following table details the recommendations for temperature, humidity, and altitude settings for the Service Provider (SP) environment. Table 2-1 Environmental Requirements Environmental Description Specifications Temperature 0 to 40 °...
If you remove a card or module and replace it with the same type of card or module, the system resumes operation without any operator intervention. • Do not force the card or module into its slot. This can damage the pins on the backplane if they are not aligned properly with the card or module.
This chapter introduces TippingPoint concepts and functionality. It provides an overview of the TippingPoint 10. Overview This chapter details the components, chassis, requirements, and installation of the TippingPoint 10 IPS. This information applies to the following part numbers: Device HP SKU TippingPoint SKU TippingPoint 10 Copper Port, JC184A TPRN0010CAS96 Single Device Before you begin the installation process, obtain the TippingPoint Command Line Interface Reference.
Figure 3-2 shows the chassis back panel for a TippingPoint 10. Figure 3-2 TippingPoint 10 - Back Panel The TippingPoint 10 ships with the following pre-installed components: • Two 10/100/1000 Gigabit Ethernet segments supporting up to 20 Mbps aggregate across all segments •...
Table 3-1 TippingPoint 10 LEDs Location Description ACTIVE In the middle of each port pair that Green: The unit is passing and comprises a segment. inspecting traffic. No Light: The unit has no power or is using the internal ZPHA to pass traffic without inspection.
Hardware Installation and Configuration Prior to installation, you should also obtain the TippingPoint Command Line Interface Reference. After installation of the components, you will need to run through the TippingPoint Setup Wizard as part of the installation and configuration procedures. This chapter includes the following sections: •...
Page 25
The following diagram shows the TippingPoint 10 on the fully-assembled mounting plate, with the rack ears attached. Figure 3-3 TippingPoint 10 Rack and Wall Mount Assembly To attach the TippingPoint 10 to the mounting plate Place the mounting plate on a flat surface. Place the TippingPoint 10 between the device brackets on the mounting plate.
Page 26
Attach the cables to the AC adapter. Refer to the following diagram: Figure 3-5 TippingPoint 10 Power Adapter Bracket a. Slide the AC power cord through the retention camp on the wall mount plate and plug the cord into the AC socket on the adapter. b.
Page 27
To attach the TippingPoint 10 to a rack If you plan to install the TippingPoint 10 on a rack, follow these steps to attach the ears: Attach the rack mount ears to the server rack with screws. Place the mounting plate containing the TippingPoint 10 on to the rack mount ears with the ear lugs resting in the attachment holes.
NOTE: You should always attach the TippingPoint 10 to the mounting plate before attaching the plate to the rack mount ears. The diagrams show the mounting plate and rack mount ears without the TippingPoint 10 for demonstration purposes only. Connect cables This section describes the steps for connecting cables to the TippingPoint 10.
Connect the Power The TippingPoint 10 includes an AC/DC power adapter. Follow these steps to connect power to the device. NOTE: You must always use the TippingPoint-supplied AC/DC power adapter with the TippingPoint 10. Do not use any other power adapters with this device. Plug the included AC/DC power adapter into the power input at the back of the device.
USB Update and Restore The TippingPoint 10 supports TOS updates and snapshot restorations from update and snapshot files stored on a USB thumb drive. The device must be unconfigured or reset to pre-OBE factory settings. Ensure that the desired TOS update or snapshot file with a extension is available in the top level directory of the USB drive.
Overview This chapter details the components, chassis, requirements, and installation of the TippingPoint 1 10 and TippingPoint 330 IPS. This information applies to the following part numbers: Device HP SKU TippingPoint SKU TippingPoint 1 10 Copper Port JC186A TPRN01 10CAS96...
Figure 4-2 shows the chassis back panel for a TippingPoint 1 10/330. Figure 4-2 TippingPoint 1 10/330 - Back Panel The TippingPoint 1 10 and the TippingPoint 330 ship with the following pre-installed components: • Four 10/100/1000 Gigabit Ethernet segments supporting up to: •...
Table 4-1 TippingPoint 1 10/330 LEDs Location Description Link The left side of each RJ45 port. Green: The link on the port is active. No light: The link is down. Packet Activity The right side of each RJ45 port. Flashing Yellow: The port is passing data.
Software Specifications To run the TippingPoint Intrusion Prevention System (IPS), you must use one of the following: • A network-connected PC that supports Internet Explorer 7.x or higher or Mozilla Firefox 3.x or higher. • TippingPoint Security Management System (SMS) Software, Version 3.6 and above. Hardware Installation and Configuration Prior to installation, you should also obtain the TippingPoint Command Line Interface Reference.
Special Wiring Considerations The TippingPoint1 10 and 330 include integrated Zero-Power High Availability (ZPHA) relays. The ZPHA relays provide a network bypass for Ethernet traffic in the event that the IPS loses power. When you install and configure a device with integrated ZPHA, you should first connect the network cables with the device powered off and ensure that link is established and traffic passes successfully.
CAUTION: Be sure to release the power button as soon as the unit begins the shutdown sequence. If you hold the button for 4 seconds, the unit will perform a hard reset and power off without performing a graceful shutdown, which may result in loss of data. Perform a hard reset only in case of emergency, when the standard shutdown procedure fails.
Connector and Pinout Specifications This appendix provides connector and pinout information for the TippingPoint system. This appendix contains the following sections: • ”RJ-45 (COM) Console” on page 29 • ”RJ-45 Ethernet Connectors” on page 29 RJ-45 (COM) Console The following figure displays the RJ-45 connector. Figure A-1 RJ-45 Connector Table A- 1...
Page 38
Table A-2 RJ-45 Ethernet Connector Pinouts Pin Number Signal Name Ground (GND) Ground (GND) Use the following pinout information when your RJ-45 device is operating in 1000Mbps (1GbE) mode. Table A-3 RJ-45 Connector Pinouts Pin Number Signal Name Twisted Pair 1 positive (TP1+) Twisted Pair 1 negative (TP1-) Twisted Pair 2 positive (TP2+) Twisted Pair 3 positive (TP3+)