Nokia IP1220 Installation Manual
  1. Manuals
  2. Brands
  3. Nokia Manuals
  4. Security System
  5. IP1220 - Security Appliance
  6. Installation manual

Nokia IP1220 Installation Manual

Security platforms
Hide thumbs
Table of Contents

Quick Links

All manuals and user guides at all-guides.com
IP1220 and IP1260 Security
Platforms Installation Guide
Part No. N450000536 Rev 001
Published June 2008
Table of Contents
loading

Related Manuals for Nokia IP1220

Summary of Contents for Nokia IP1220

  • Page 1 All manuals and user guides at all-guides.com IP1220 and IP1260 Security Platforms Installation Guide Part No. N450000536 Rev 001 Published June 2008...
  • Page 2 IMPORTANT NOTE TO USERS This software and hardware is provided by Nokia Inc. as is and any express or implied warranties, including, but not limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services;...
  • Page 3 Singapore 119968 Nokia Customer Support Web Site: https://support.nokia.com/ Email: [email protected] Americas Europe Voice: 1-888-361-5030 or Voice: +44 (0) 125-286-8900 1-613-271-6721 Fax: 1-613-271-8782 Fax: +44 (0) 125-286-5666 Asia-Pacific Voice: +65-67232999 Fax: +65-67232897 050602 IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 4 All manuals and user guides at all-guides.com IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 5: Table Of Contents

    Product Disposal ........... 30 2 Installing the Nokia IP1200 Series Appliance ......33 Rack Mounting the Appliance.
  • Page 6 Before You Begin ..........68 Nokia ADP Card LED Reference Information ......71 Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces .
  • Page 7 Before You Begin ..........99 Installing a Nokia Encryption Accelerator Card ......102 Before You Begin .
  • Page 8 All manuals and user guides at all-guides.com IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 9 Figure 3 Pin Assignments for Console and AUX Connections ....22 Figure 4 Nokia IP1200 Series Appliance System Status LEDs ....23 Figure 5 Hard-Disk Drive Front Pane .
  • Page 10 All manuals and user guides at all-guides.com IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 11 Table 1 Text Conventions ......... . . 14 Table 2 Nokia IP1200 Series Disk-Based Security Platform Specifics ..17 Table 3 Nokia IP1200 Series Flash-Based Security Platform Specifics .
  • Page 12 All manuals and user guides at all-guides.com IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 13: About This Guide

    All manuals and user guides at all-guides.com About this Guide This manual provides information for the installation and use of the Nokia IP1200 Series security platforms. Installation and maintenance should be performed by experienced technicians or Nokia-approved service providers only.

  • Page 14: Conventions This Guide Uses

    Keys that you press simultaneously are linked by a plus sign (+): Press Ctrl + Alt + Del. Menu commands Menu commands are separated by a greater than sign (>): Choose File > Open. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 15: Related Documentation

    CLI Reference Guide for the version of Nokia IPSO you are using Getting Started Guide and Release Notes for the version of Nokia IPSO you are using Nokia IPSO Boot Manager Reference Guide, which describes how to use the Nokia IPSO...
  • Page 16 All manuals and user guides at all-guides.com IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 17: Overview

    The Nokia IP1220 security platform is a mid-range security platform that is ideally suited for a smaller data center. Both IP1200 Series security platforms support an encryption accelerator card to further enhance VPN performance.

  • Page 18: About The Nokia Ip1200 Series Flash-Based Security Platforms

    PMC network interface cards (NICs) for a total of four NICs. These network interfaces provide exceptional data forwarding and monitoring performance when used with Nokia and partner applications. In addition, the IP1200 Series allows you to boost performance as needed through next-generation, high-end Nokia Accelerated Data Path (ADP) services modules and Nokia IPSO system upgrades.

  • Page 19: Managing The Nokia Ip1200 Series Security Platform

    Everything that you can accomplish with Network Voyager—manage, monitor, and configure the IP1200 Series security platform —you can also do with the CLI. For information about how to access the CLI, see the Nokia CLI Reference Guide for Nokia IPSO v3.6 or later.

  • Page 20: Ethernet Management Ports

    Figure 2 Ethernet Management Ports Details LInk LEDs (green) Port 1 Port 2 Port 3 Port 4 00120a RJ-45 connectors Caution Cables that connect to the Ethernet NIC must be IEEE 802.3 compliant to prevent potential data loss. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 21: Pmc Expansion Slots

    Chapter 6, “About IP1200 Appliance ADP Services Modules.” Note Nokia products only support NICs and ADP modules purchased from Nokia or Nokia- approved resellers. The Nokia Global Support Services group can only provide support for Nokia products that use Nokia-approved accessories. For sales or reseller information, contact a Nokia service provider listed in the “Nokia Contact Information”...

  • Page 22: Figure 3 Pin Assignments For Console And Aux Connections

    2 (RXD) 3 (RXD) 4 (DTR) 6 (DSR) 6 (DSR) 5 (SG) 5 (SG) 7 (SG) 6 (DSR) 4 (DTR) 20 (DTR) 7 (RTS) 8 (CTS) 5 (CTS) 8 (CTS) 7 (RTS) 4 (RTS) IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 23: System Status Leds

    Nokia IP1200 Series Security Platform Overview System Status LEDs You can visually monitor the status of the Nokia IP1200 Series appliance by checking the system status LEDs. The system status LEDs are located on the center of the front panel, as shown in...

  • Page 24: Hard-Disk Drives

    The IP1200 Series appliance continues to operate normally, and the switchover to the secondary mirror drive should be transparent to your data connections. You can use Nokia Network Voyager, the command-line interface (CLI), or Lynx to create and delete mirror sets.

  • Page 25: Power Supplies And Fan Unit

    Do not remove the hard-disk drive if the Status LED is blinking green. Power Supplies and Fan Unit The power supplies and fan unit are located at the rear of the IP1200 Series appliance, as shown Figure IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 26: Power Supplies

    Fan unit Power Supplies The Nokia IP1200 Series appliance supports up to two power supplies for power sharing and redundancy. The IP1260 comes with two power supplies as the standard package. The IP1220 comes with power supply; a second one is optional. The power supplies are hot swappable and perform load sharing while two active power supplies are installed, increasing the life of the power supplies.

  • Page 27: Figure 7 Ac Power Supply, Cooling Fan, And Power Switch

    For IP1200 Series appliances that use DC power supplies, the following specifications apply for Nokia approved components: Input voltage: -48 volts DC nominal -40 to - 60 volts DC auto-ranging (capable) Input current: 10 amps maximum at -40 volts DC IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 28: Fan Unit

    Appendix A, “Technical Specifications.” Safety Warnings and Cautions Warning Hazardous radiation exposure can occur if you use controls, make performance adjustments, or follow procedures that are not described in this document. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 29 Note A readily accessible disconnect device shall be incorporated in the building installation wiring. Note Installation instructions indicate listed circuit breaker or branch rated fuse, rating, number of poles, and special characteristics. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 30: Software Requirements

    Check Point VPN-1 versions compatible with the version of Nokia IPSO you are using For information about updates to the software requirements or additional applications that have become available since this guide was published, contact your Nokia service provider, as listed “Nokia Contact Information” on page 3.
  • Page 31 This applies to your device but also to any enhancements marked with this symbol. Do not dispose of these products as unsorted municipal waste. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 32 All manuals and user guides at all-guides.com Overview IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 33: Installing The Nokia Ip1200 Series Appliance

    All manuals and user guides at all-guides.com Installing the Nokia IP1200 Series Appliance This chapter describes how to install the Nokia IP1200 Series appliance. The following topics are discussed: Rack Mounting the Appliance Before You Begin Caution To help guard against electrostatic discharge damage, make sure you are properly grounded by using a grounding wrist strap and following the instructions provided with the wrist strap before you handle the components or open the appliance.

  • Page 34: Before You Begin

    You can use an adjustable wrench or similar tool to finish tightening the nut onto the stud. Do not over tighten the nuts. 6. Attach the grounding cable to an earth ground or other grounding point to meet the specifications of your installation site. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 35 Locate the fan unit and the four retaining screws that secure it on the back of the IP1200 Series. 00308a Fan unit b. Loosen the retaining screws by turning them counterclockwise. c. Slowly pull the fan unit out of the chassis tray assembly toward the rear. 00318.1 IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 36 The grounding plug on the front of the appliance (shown in Figure 1 on page 20) provides a IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 37 7. Slide the chassis tray assembly back into the appliance until it clicks into place, and resecure the four chassis tray assembly retaining screws. 8. Reinstall the fan unit into the rear of the appliance. 9. Reinstall the power supplies. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 38 All manuals and user guides at all-guides.com Installing the Nokia IP1200 Series Appliance IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 39: Performing The Initial Configuration

    All manuals and user guides at all-guides.com Performing the Initial Configuration The first time you turn on power to a Nokia IP1200 Series appliance, the initial configuration process begins. This process enables you to configure the network settings and provides access to the admin account.

  • Page 40: Using A Console Connection

    Performing the Initial Configuration Using a Console Connection If you do not use DHCP to perform the initial configuration of your Nokia IP1200 Series appliance, you must use a serial console connection (cable included). After you perform the initial configuration, you no longer need the console connection.

  • Page 41: Figure 10 Power Switch Location

    The IP1200 Series appliance power supply automatically detects the input voltage (115 VAC or 220 VAC [85 to 264]) and configures itself appropriately. 4. Check the power LED (the Nokia logo) on the front panel of the appliance to ensure that the power supply is operating correctly.

  • Page 42: Performing The Initial Configuration

    That power is turned on to the power strip or wall receptacle into which you plugged the appliance. If the fans are still not running, or if the power LED does not illuminate, contact your Nokia service provider or Nokia Support as listed in “Nokia Contact Information”...
  • Page 43 For more information about how to respond to the prompts during the initial configuration process, see the release notes for the Nokia software release you are running. 4. When you are prompted to select an interface, Nokia recommends that you select one of the Ethernet management interface ports.

  • Page 44: Connecting Network Interfaces

    All manuals and user guides at all-guides.com Performing the Initial Configuration Connecting Network Interfaces Connect at least one network interface to the network to use as the Nokia Network Voyager system-management interface. This interface is configured during the initial configuration process, which is described in Chapter 3, “Performing the Initial Configuration.”...

  • Page 45: Viewing Nokia Ipso Documentation By Using

    Network Voyager interface, as shown in Figure Nokia Network Voyager Reference Guide—This guide is the comprehensive reference source for Nokia Network Voyager. To access this source, look at the list in the navigation tree on the left side of the window (as shown in Figure 11).You can also access the Nokia...

  • Page 46: Using The Command-Line Interface

    You can now execute CLI commands from the CLI shell and the Nokia IPSO shell. The Nokia IPSO shell is what you see when you initially log on to the platform.
  • Page 47 Horizon Manager is designed to manage and configure a large number of Nokia security appliances that reside on a corporate enterprise, managed service provider (MSP), or hosted applications service provider network (ASP).
  • Page 48 All manuals and user guides at all-guides.com Performing the Initial Configuration IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 49: Installing And Replacing Network Interface Cards And Accelerated Data Path

    Interface Cards and Accelerated Data Path (ADP) Services Modules The Nokia IP1200 Series appliance may come with network interface cards (NICs) in a PMC carrier or an ADP module you ordered already installed. All NICs installed in the IP1200 Series are housed in a 6U PMC carrier.

  • Page 50: Removing, Installing, And Replacing Nics Or The Adp Module

    To replace a network interface card (NIC) or ADP module Note If you are servicing the slot 1 carrier, Nokia recommends that you disconnect interface cables from the PMC cards after you remove the carrier, as it is more difficult to remove cables from a carrier installed in that location.
  • Page 51 00310b.2 5. Continue to press or push the levers outward until the PMC carrier or ADP module is released and extends slightly beyond the front panel of the IP1200 Series. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 52 00311 Note If you are installing a NIC in an unoccupied slot on the PMC carrier, remove the blank bezel that covers the slot and retain it for future use. Proceed to step IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 53 9. Locate and remove the two NIC retaining screws from the back of the NIC. 00312 10. Remove the NIC by lifting the back of the NIC away from the chassis tray assembly and pulling it gently away from the front panel. 00313 IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 54 PMC carrier. Proceed to step Note To reduce electromagnetic interference (EMI), a blank bezel needs to be installed in the place of any NIC you have removed. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 55 14. Insert the PMC carrier or ADP module back into its original slot on the front of the IP1200 Series appliance until it clicks into place. 15. Press both levers to make sure that they are locked into place and power is restored to the card carrier. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 56: Configuring And Activating Interfaces

    The power indicator LED on the PMC carrier or ADP module illuminates green. 00315.2 If you are replacing a NIC or ADP module with a one of the same type, the Nokia IPSO operating system automatically recognizes the device and applies the original configuration.

  • Page 57: About Ip1200 Series Appliance Network Interface Cards

    All manuals and user guides at all-guides.com About IP1200 Series Appliance Network Interface Cards This chapter describes the network interface cards available for the Nokia IP1200 Series appliance and how to connect those NICs to your network. The following NICs are described: Four-Port 10/100 Ethernet NICs...

  • Page 58: Four-Port 10/100 Ethernet Nics

    Network Interface Cards and Accelerated Data Path (ADP) Services Modules.” 10/100 Ethernet NIC Features The four-port 10/100 Ethernet NIC supports PCI operation at 100 MHz and runs on Nokia IPSO v3.8 or higher. Both the four-port and two-port Ethernet NICs support the following features:...

  • Page 59: Ethernet Nic Connectors And Cables

    Cables that connect to the Ethernet card must be IEEE 802.3 compliant to prevent potential data loss. Figure 13 shows the pin assignments for the RJ-45 cable. The connector is numbered from right to left, with the copper tabs facing up and toward you. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 60: Two-Port And Four-Port Copper Gigabit Ethernet Nics

    Figure 14 Ethernet Crossover-Cable Pin Connections 00017.1 Two-Port and Four-Port Copper Gigabit Ethernet NICs The Nokia IP1200 Series appliance supports Nokia-approved, two-port and four-port copper Gigabit Ethernet NICs installed on a 6U PMC carrier. The IP1200 Series can accommodate up to four Gigabit Ethernet NICs.

  • Page 61: Copper Gigabit Ethernet Nic Features

    PCI operation at 33 MHz, 66 MHz, and 100 Mhz Compliance with IEEE 802.3z and 802.3ab Gigabit Ethernet specifications You can configure and monitor Gigabit Ethernet NIC interfaces with Nokia Network Voyager. Specifically, you can use Network Voyager to set the port speed and full-duplex mode to 1000, 100, or 10 Mbps.

  • Page 62: Performance Considerations

    Certain circumstances might require shielded Cat 5 Ethernet cables to meet Class B emissions requirements. Figure 17, the RJ-45 cable output connector is numbered from right to left, with the copper pins facing up and toward you. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 63: Figure 17 Ethernet Cable Connector Output Pin Assignments

    As data is transmitted or received, the activity LEDs on the appliance illuminate. To connect the IP1200 Series to other network components, you can order appropriate adapter cables separately from a cable vendor of your choice. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 64: Two-Port Fiber-Optic Gigabit Ethernet Nics

    The long-range single-mode fiber (SMF) fiber-optic Gigabit Ethernet NICs in the IP1200 run on Nokia IPSO v4.2 or higher. You can configure and monitor Gigabit Ethernet NIC interfaces with Nokia Network Voyager. Specifically, you set the port speed and full-duplex mode with Network Voyager.

  • Page 65: Fiber-Optic Gigabit Ethernet Nic Connectors And Cables

    PMC card carrier unit has a separate PCI bus connection to the main system motherboard. In the configuration described here, each of the two fiber-optic two-port Gigabit Ethernet NICs access a separate PCI bus. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 66 About IP1200 Series Appliance Network Interface Cards For the IP1200 Series appliance, any two NICs installed on a single PMC carrier both operate at the PCI frequency of the least capable NIC installed. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 67: About Ip1200 Appliance Adp Services Modules

    CPU to network processors. For IP1220 and IP1260 appliances, ADP is implemented with a single module installed in a two-slot card carrier, which provides a total of eight ports. The modules use swappable small form-factor pluggable (SFP) transceivers to provide Gigabit Ethernet copper, Gigabit Ethernet short-range fiber, and Gigabit Ethernet long-range fiber interface options.

  • Page 68: Installing And Replacing Adp Modules

    Before you begin this procedure, you should review all ADP module information in the Nokia Getting Started Guide and Release Notes for the version of Nokia IPSO you are using and refer to both of these documents as needed as you complete the installation and configuration process.
  • Page 69 “Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces” on page 71. The following figure shows an IP1220 and IP1260 ADP module and card carrier assembly. Link and Activity LEDs Power LED illuminates green when the module is under power...
  • Page 70 Release the transceiver by rotating the latch lever. Pull out the transceiver. Note that if you install any ADP transceivers that are not supported by Nokia, they are not recognized by Nokia IPSO; the system rejects the transceivers and includes them in a list of...

  • Page 71: Nokia Adp Card Led Reference Information

    ADP module. To help you understand the implications of installing an ADP module, it provides an example of the steps you might perform to install an ADP module in an IP1220 or IP1260 appliance running the Virtual Router Redundancy Protocol (VRRP).

  • Page 72: Nokia Adp Card Interface Names For Ip1220 And Ip1260 Appliances

    Appliances ADP module interface naming conventions differ from those for PMC NICs IP1220 and IP1260 appliances support one ADP module, which you install in slots 1 and 2. The eight ports on your ADP module are named as follows: eth-s2p1, eth-s2p2, eth-s2p3, eth-s2p4, eth-s2p5, eth-s2p6, eth-s2p7, eth-s2p8...

  • Page 73: Configuration Example With Vrrp

    Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces Configuration Example with VRRP This example describes the steps required to install an ADP module in an IP1220 or IP1260 appliance with VRRP configured. The following figure shows the Interface Configuration page of the platform before an ADP module is installed.

  • Page 74: Deleting Vrrp Configurations

    It is best to perform the procedures in this section on the VRRP backup system first. When the installation is complete, the upgraded system can become the new master while you upgrade the original master. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 75: Reconfiguring Interfaces

    All manuals and user guides at all-guides.com Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces Reconfiguring Interfaces After you install the ADP module, you need to reconfigure interface information as described below. To reconfigure interfaces for an ADP module 1.
  • Page 76 Also notice that the ADP logical interfaces are named eth-s2p1c0 through eth-s2p8c0: 3. Delete the interface names and configuration information for each interface you removed by following the remaining steps in this procedure. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 77 All manuals and user guides at all-guides.com Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces Note To delete an interface used by VRRP or IP clustering, you must first disable the feature that uses the interface. This is why you deleted the VRRP configuration before you installed the ADP module.

  • Page 78: Reconfiguring Vrrp

    In this example, you need to assign the address 10.1.1.1 to the new interface eth-s2p1c0. Reconfiguring VRRP After you finish reconfiguring interfaces, you need to reconfigure any protocols and features that used the removed interfaces to use the ADP interfaces. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 79 All manuals and user guides at all-guides.com Configuring Nokia IPSO for IP1220 and IP1260 ADP Interfaces In this example, you need to recreate the VRRP configuration using the new interfaces eth-s2p1c0 and eth-s2p2c0. The following figure shows the example system after you...
  • Page 80 All manuals and user guides at all-guides.com About IP1200 Appliance ADP Services Modules IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 81: Installing And Replacing Components Other Than Network Interface Cards (Nics) And Accelerated Data Path (Adp) Services Modules

    This chapter provides information about how to install or replace components other than network interface cards (NICs) and Accelerated Data Path (ADP) services modules in your Nokia IP1200 Series appliance. The following topics are covered: Replacing a Hard-Disk Drive Installing a PC Card...

  • Page 82: Replacing A Hard-Disk Drive

    Installing and Replacing Components Other than Network Interface Cards (NICs) and Accelerated Data Path Replacing a Hard-Disk Drive The Nokia IP1200 Series appliance supports up to two hard-disk drives with the disk mirroring feature in the Nokia IPSO operating system. If the appliance has only one hard-disk drive installed, it is in the top slot (slot A).

  • Page 83: Hard-Disk Drive Hot Swap Feature

    Nokia hard-disk drive kit and accompanying documentation Phillips-head screwdriver Removing and Replacing a Hard-Disk Drive If you have disk mirroring configured on your Nokia IP1200 Series appliance, you can remove a failed hard-disk drive without shutting down the appliance. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 84 Back up your hard-disk drive files to a remote system on a regular basis. For backup and restore procedures, see the Getting Started Guide and Release Notes for the version of Nokia IPSO you are using, or the Nokia Horizon Manager User Guide and online help.
  • Page 85 9. Press the recessed hot swap button again to restore power to the hard-disk drive. The IP1200 Series recognizes the new hard-disk drive. 10. Use Nokia Network Voyager, Lynx, or the CLI to implement disk mirroring. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 86 2. Loosen the retaining screws on both sides of the hard-disk drive. Caution To avoid damage to the ejector and locking lever, loosen the retaining screw behind each ejector and locking lever before you remove the hard-disk drive. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 87 7. Press the hot swap button to restore power to the hard-disk drive. The IP1200 Series recognizes the new hard-disk drive. 8. Use Nokia Network Voyager, Lynx, or the CLI to implement disk mirroring. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 88: Installing A Pc Card

    After you install a single-slot PCMCIA carrier card, which you can purchase from Nokia, the IP1200 Series appliance supports a PC card with 1-GB flash memory that Nokia offers with or without system software included. You can use the carrier card in slot 3, which is located on the...
  • Page 89 Any servicing of the appliance, however, should be completed with the chassis tray assembly fully removed from the appliance. 1. Use Nokia Network Voyager or the CLI to perform an orderly shutdown of the IP1200 Series appliance. For information about how to access Network Voyager and the related reference materials, “Using Nokia Network Voyager”...
  • Page 90 3. Slide the chassis tray assembly forward, press and tray release lever, and completely remove the tray from the appliance. 00049 4. Remove the six screw that secure the metal shield above the two PMC carriers or ADP module and remove the shield. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 91 2 6 0 S LO S LO R ES Remove PMC carriers or ADP module 00654b.1 6. Remove the two front bezel screws and remove the slot 3 filler panel or installed NIC. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 92 W ER T SW T SW C O N S O L S L O S L O I P 1 2 6 0 S L O S L O R E S 00657b.1 IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 93 1. Insert the PC card into the PC card slot until it snaps in place. 2. Press gently on the card until it is firmly seated in the slot. The eject button to the left of the slot should be flush with the card. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 94: Storing System Logs On The Flash-Memory Pc Card

    You can use the flash-memory PC card to store system log messages. Use Nokia Network Voyager to configure the flash-memory PC card as an optional disk. After you reboot the Nokia IP1200 Series appliance, use Network Voyager to configure system logging options. For more information, see the Nokia Network Voyager Reference Guide for the version of Nokia IPSO you are using.

  • Page 95: Transferring Files With The Flash-Memory Pc Card

    /dev/wd1 /cdrom The /cdrom directory is a default directory in Nokia IPSO for mounting media. 4. Use the cp command to transfer Nokia IPSO images or configuration files to and from the flash-memory PC card. For example, to copy the current Nokia IPSO image from the compact flash to the flash- memory PC card, use the following command: cp /image/current/ipso.tgz /cdrom/...

  • Page 96: Replacing The Compact Flash Memory Card

    You cannot see the compact flash memory unless you remove the hard-disk drives. To replace the compact flash memory card, you need: Physical access to the appliance Access to the appliance by using Nokia Network Voyager or the CLI A Phillips-head screwdriver Replacement compact flash memory card and accompanying documentation You must perform an orderly shutdown of the appliance and turn the power off whenever you open the chassis tray assembly to service internal components.
  • Page 97 6. Slide the chassis tray assembly forward, pressing the release tab on the right side of the assembly, and completely remove the chassis to expose the compact flash memory slot on the motherboard. 00049 IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 98 12. Press the power switch, located on each power supply at the back of the appliance, to turn on the power to the appliance. Note Make sure you turn on both power supplies. Note Disk-mirroring is disabled for the Nokia IP1200 Series flash-based appliance in the Nokia IPSO v3.9 release. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 99: Replacing Or Upgrading Memory

    Replacing or Upgrading Memory The Nokia IP1200 Series appliance has four dual inline memory-module (DIMM) sockets. This section describes how to upgrade or replace the memory by using a Nokia-approved memory upgrade kit. The IP1200 Series appliances come with different memory configurations. Contact Nokia customer support for more information on the supported memory configurations.
  • Page 100 To add or replace DIMMs 1. Use Nokia Network Voyager or Lynx to perform an orderly shutdown of the IP1200 Series. For information about how to access Network Voyager and the related reference materials, “Using Nokia Network Voyager”...
  • Page 101 You must install DIMMs in pairs starting from the left. Insert a pair of DIMMS into adjacent slots J5/J6 and/or J7/J8, otherwise the DIMMS will not work. You can also use all four slots at one time. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 102: Installing A Nokia Encryption Accelerator Card

    The IP1260 appliance comes with the Nokia encryption accelerator card preinstalled as part of its base bundle. If you ordered the Nokia encryption accelerator card as an option before purchasing the IP1220, then the Nokia encryption accelerator card is installed before the appliance is delivered.

  • Page 103: Before You Begin

    To install the encryption accelerator card 1. Use Nokia Network Voyager or Lynx to shut down the IP1200 Series. For information about how to access Network Voyager and the related reference materials, “Using Nokia Network Voyager”...
  • Page 104 Installing and Replacing Components Other than Network Interface Cards (NICs) and Accelerated Data Path 2. Loosen the four front-panel retaining screws. IP1200 00507.2 3. Slide the chassis tray assembly forward to expose the motherboard components. 00326a.2 4. Locate the PMC connectors on the motherboard. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 105 The two sets of connectors should be aligned with each other. The four screw holes and four standoffs should also be aligned with each other. 6. Push down on the card until it is properly seated on the motherboard. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 106: Configuring Software To Use Hardware Acceleration

    The Nokia encryption accelerator software package is part of the Nokia IPSO operating system, so the appliance automatically detects and configures the Nokia encryption accelerator card. For the Nokia IP1200 appliances, SecureXL is on by default. After you install the Nokia encryption accelerator card and reboot the appliance, SecureXL automatically uses the Nokia encryption accelerator card for encryption acceleration.

  • Page 107: Installing A Fan Unit

    The PKCS#11 token that enables IKE acceleration is registered with the Check Point software on your appliance. After you register the module, you must install the Check Point security policy on the firewall for the Nokia encryption accelerator card to perform IKE acceleration. Installing a Fan Unit The fan unit is hot swappable.

  • Page 108: Installing Or Replacing A Power Supply

    In this situation, the power supply still meets all safety standards.This condition is normal and does not affect the performance of the Nokia IP1200 Series. To cool the power supply down, use the power supply switch to turn on power and activate the integrated cooling fan.

  • Page 109: Before You Begin

    Installing or Replacing a Power Supply Caution The Nokia IP1200 Series appliance power supply might be hot to the touch when the power supply unit is plugged in to an AC power source and the power supply is not turned on.

  • Page 110: Monitoring The Power Supply

    9. Turn on power to the power supply. Monitoring the Power Supply You can monitor the status of the Nokia IP1200 Series appliance power supply with Nokia Network Voyager. Similarly, you can also use the command-line interface (CLI). For information about the CLI, see the CLI Reference Guide.

  • Page 111: Before You Begin

    All manuals and user guides at all-guides.com Replacing Motherboard Batteries Before You Begin Before you replace the battery, you need the following: The appropriate Nokia battery replacement kit for your appliance Physical access to the appliance A Phillips-head screwdriver A wrist grounding strap...
  • Page 112 Step 1 through Step 6. If the appliance does not start up normally after that, contact your Nokia service provider. 6. Reset the appliance date and time information using Nokia Network Voyager or the command-line interface. You need to do this because the battery is required to maintain the date and time whenever you shut down the appliance.

  • Page 113: Troubleshooting

    This chapter provides troubleshooting tips, problems, and solutions related to Nokia IP1200 Series appliance installations. For information about how to reinstall the Nokia IPSO operating system onto your appliance, see the Nokia IPSO Boot Manager Reference Guide. General Troubleshooting Information The information in this section relates to problems you might encounter during the IP1200 Series installation.
  • Page 114 Problem Database is corrupt. Solution Return to default settings as described in “To reset the default database settings” page 115, or contact the Nokia customer support site listed in “Nokia Contact Information” page 3. IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 115 Chapter 3, “Performing the Initial Configuration.” To reset the default database settings 1. Log in to the IP1200 Series as admin by using Nokia Network Voyager. For information about how to access Network Voyager and the related reference materials, “Using Nokia Network Voyager”...
  • Page 116 Series. This procedure erases any configuration database on the appliance. For information about how to complete the full installation procedure, see the current release notes. The “Nokia release notes are located on the Nokia customer support Web site as listed in the Contact Information” on page 3.
  • Page 117 Solution You might have set the wrong speed. Verify that the speeds match on each end of the Ethernet connection (10 Mbps, 100 Mbps, or 1000 Mbps). Problem Port not enabled. Solution Verify from the Interface page in Nokia Network Voyager that the interface port is configured as active. Problem High collision rate on the hub.
  • Page 118 All manuals and user guides at all-guides.com Troubleshooting IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 119: Space Requirements

    (not to exceed 96 consecutive hours) Humidity 5% to 90% Space Requirements The Nokia IP1200 Series Security Platform is designed for front-screw mounting in a 19-inch rack. Each IP1200 Series requires the following space in a rack: 3.5 inches (8.89 centimeters) of vertical space...

  • Page 120: A Technical Specifications

    All manuals and user guides at all-guides.com Technical Specifications IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 121: B Compliance Information

    Third Edition:2000; CAN/CSA-C22.2 No.60950:2000 EMC: EN55024 1998, EN55022A 1998, EN61000-3-2, EN61000-3-3 Supplementary information: Pursuant to ISO/IEC 17050 this product complies with the requirements of the Low Voltage Directive 73/23/EEC and the EMC Directive 2004/108/EC. IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 122: Compliance Statements

    US/Canada EN55022 (CISPR 22 Class A) European Community (CE) Immunity Standards EN55024 European Community (CE) EN61000-4-2 EN61000-4-3 EN61000-4-4 EN61000-4-5 EN61000-4-6 EN61000-4-11 Harmonics and Voltage Fluctuation EN61000-3-2 European Community (CE) EN61000-3-3 European Community (CE) IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 123: Fcc Notice (Us)

    Caution Any changes or modifications not expressly approved by the grantee of this device could void the user’s authority to operate the equipment. 060425 IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 124 All manuals and user guides at all-guides.com Compliance Information IP1220 and IP1260 Security Platforms Installation Guide...

  • Page 125: Index

    Ethernet network interface cards 59 console cable 40 gasket 50 console connection 40 grounding 34 console port 18, 21 cooling 18 copper Gigabit Ethernet NICs 21 data communications equipment device 40 IP1220 and IP1260 Security Platforms Installation Guide Index - 125...
  • Page 126 Nokia encryption accelerator card 102 system status LEDs 23 Nokia Horizon Manager 19 Nokia IPSO command-line interface 19 Nokia IPSO requirements 30 Nokia Network Voyager 19 technical specifications 119 opening 44 text conventions 14 Index - 126 IP1220 and IP1260 Security Platforms Installation Guide...
  • Page 127 All manuals and user guides at all-guides.com troubleshooting 113 two-port Ethernet network interface card 64, 65 upgrading memory 99 UTP5 dual-mode Ethernet 58 VT100-compatible terminal 40 warning notices 14 IP1220 and IP1260 Security Platforms Installation Guide Index - 127...
  • Page 128 All manuals and user guides at all-guides.com Index - 128 IP1220 and IP1260 Security Platforms Installation Guide...

This manual is also suitable for:

Ip1260

Table of Contents