Nokia IP500 Series Installation Manual
  1. Manuals
  2. Brands
  3. Nokia Manuals
  4. Network Hardware
  5. ip500 series
  6. Installation manual
Nokia IP500 Series Installation Manual

Nokia IP500 Series Installation Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
All manuals and user guides at all-guides.com
IP500 Series
Installation Guide
Part No. N450452003 Rev. A
Published September 2002

Advertisement

Table of Contents
loading

Related Manuals for Nokia IP500 Series

Summary of Contents for Nokia IP500 Series

  • Page 1 All manuals and user guides at all-guides.com IP500 Series Installation Guide Part No. N450452003 Rev. A Published September 2002...
  • Page 2 Rights clause at FAR 52.227-19. IMPORTANT NOTE TO USERS This software and hardware is provided by Nokia Inc. as is and any express or implied warranties, including, but not limited to, implied warranties of merchantability and fitness for a particular purpose are disclaimed. In no event shall Nokia, or its affiliates, subsidiaries or suppliers be liable for any direct, indirect, incidental, special, exemplary, or consequential damages (including, but not limited to, procurement of substitute goods or services;...
  • Page 3 Tel: +358 9 692 7156 email: ipsecurity.apac@nokia.com Nokia Customer Support Web Site: https://support.nokia.com/ Email: tac.support@nokia.com Americas Europe Voice: 1-888-361-5030 or Voice: +44 (0) 125-286-8900 1-613-271-6721 Fax: 1-613-271-8782 Fax: +44 (0) 125-286-5666 Asia-Pacific Voice: +65-67232999 Fax: +65-67232897 021018 IP500 Series Installation Guide...
  • Page 4 All manuals and user guides at all-guides.com IP500 Series Installation Guide...

  • Page 5: Table Of Contents

    Contents IP500 Series Documentation ......15 In This Guide ......... 15 Conventions This Guide Uses .
  • Page 6 Completing the Configuration ......45 Using Voyager to Monitor an IP500 Series Appliance ..45 Installing and Replacing Network Interface Cards .
  • Page 7 Before You Begin ........91 Installing the Nokia Encryption Accelerator II Card ... . 93 Before You Begin .
  • Page 8 FCC Requirements (US) ....... 154 Equipment Attachment Regulations (Canada) ....155 IP500 Series Installation Guide...
  • Page 9 Index ..........157 IP500 Series Installation Guide...
  • Page 10 All manuals and user guides at all-guides.com IP500 Series Installation Guide...
  • Page 11 Figure 17 Dual-Port Gigabit Ethernet NIC Front Panel ..61 Figure 18 Recommended Installation Configuration for IP500 Series Appliances ....... . . 63 Figure 19 HSSI NIC .
  • Page 12 Figure 23 OEM T1 NIC ....... . 69 Figure 24 Nokia T1 NIC ....... 69 Figure 25 Typical Single-Port V.35 or X.21 NIC Front Panel...
  • Page 13 Table 4 Designations of Built-In Ethernet Ports ... . . 32 Table 5 Designations for Additional Ethernet Ports (Slot 1) ..58 Table 6 Signal and Pin Assignments for a HSSI NIC ..64 IP500 Series Installation Guide...
  • Page 14 All manuals and user guides at all-guides.com IP500 Series Installation Guide...

  • Page 15: Ip500 Series Documentation

    IP500 Series Documentation In addition to this installation guide, documentation for this product includes the following: Release Notes for IPSO software Voyager Inline Help Online Voyager Reference Guide For information about using Voyager, see the appropriate inline help. IP500 Series Installation Guide...
  • Page 16 All manuals and user guides at all-guides.com In This Guide This guide consists of the following chapters and appendixes: Chapter 1, “Overview” presents a general overview of the IP500 Series appliance. Chapter 2, “Installing the IP500 Series Appliance” explains how to physically connect the device to a network.

  • Page 17: Conventions This Guide Uses

    Log error 12453 Indicates text you enter or type, for example: bold monospace font # configure nat Key names Keys that you press simultaneously are linked by a plus sign (+): Press Ctrl + Alt + Del. IP500 Series Installation Guide...
  • Page 18 Indicates arguments for which you must supply a value: retry-limit <1-100> Vertical bars, also called a Separates alternative, mutually exclusive elements. pipe ( | ) framing <sonet | sdh> Square brackets [ ] Indicates optional commands: delete [slot slot_num] IP500 Series Installation Guide...

  • Page 19: Overview

    RealSecure) for Nokia. Network interface cards (NICs) offer flexibility in making network connections. You can manage IP500 Series NAP products with Voyager and Nokia Horizon Manager software. Voyager is preinstalled on the IP500 Series appliance. With Voyager, you can use a standard Web browser to manage, monitor, and configure the platform from any location within the network.

  • Page 20: Appliance Overview

    This integrated approach provides many benefits: One-step ordering and start-up—All interfaces and peripherals are preinstalled. Flexibility—You can add new interfaces and peripherals as your needs change. Dependability—Nokia supports the entire appliance. Appliance Overview Figure 1 shows the front of the appliance. IP500 Series Installation Guide...

  • Page 21: Figure 1 Front Of Appliance

    All manuals and user guides at all-guides.com Appliance Overview Figure 1 Front of Appliance IP500 Series Installation Guide...

  • Page 22: Figure 2 Front Of Appliance Indicating Interfaces, Console Port, And

    The three LEDs to the right of the console port are system indicators, which function simultaneously. Table 2 describes the LED display meanings. Table 2 System Status LEDs Position Label Color Meaning Green Appliance receiving power Middle ALERT Yellow Appliance not performing within specifications Bottom FAULT Appliance experiencing fault IP500 Series Installation Guide...

  • Page 23: Figure 3 Rear Of Appliance

    All manuals and user guides at all-guides.com Appliance Overview Figure 3 shows the rear of the appliance. Figure 3 Rear of Appliance IP500 Series Installation Guide...

  • Page 24: Figure 4 Rear Of Appliance Indicating On-Off Switch, Power Plug Socket, And Power Supply Leds

    Overview Figure 4 shows a more detailed view of the rear of the IP500 Series appliance, with the on-off switch, power plug sockets, fan unit, and power LEDs labeled. The fan unit, which is used to keep the appliance at proper operating temperature, is on the left.

  • Page 25: Hardware Features

    One EIA-232 auxiliary port with DB9 connector Two Type II PCMCIA slots Two slots for 3.5-inch IDE hard-disk drive units The IP500 Series appliance also has three compact PCI (cPCI) expansion slots that support the following NICs: Dual-port X.21 or V.35 serial interface...

  • Page 26: Space Requirements

    Dispose of used batteries according to the manufacturer’s instructions. Space Requirements You can install the IP500 Series appliance in a standard 19-inch rack or as a stand-alone appliance. Rack Installation The cover of the appliance is designed for front-screw mounting in a standard 19-inch rack.

  • Page 27: Software Requirements

    Do not stack the appliances more than three high. Do not stand the appliance on its side. Software Requirements The IP500 Series appliance supports the following operating system and applications: Operating system requirements—IPSO v3.3.1 or later. FireWall and VPN software requirements—Check Point Firewall 4.1 (SP3 or later), and Check Point NG (FP2 or later).
  • Page 28 All manuals and user guides at all-guides.com Overview IP500 Series Installation Guide...

  • Page 29: Installing The Ip500 Series Appliance

    Connecting Power The IP500 Series appliance comes with an internal DC power supply and a cord for connecting the power supply to a power source. The cord is specific to the country in which the appliance was purchased.

  • Page 30: Connecting To The Console

    You hear the appliance fans, which run whenever the appliance is on. The PWR LED glows green. Connecting to the Console The IP500 Series appliance comes with a null-modem serial cable with a DB-9 connector. Use this cable to connect one of the following consoles to the appliance:...

  • Page 31: Connecting Network Interfaces

    The Link LED, on the bottom left of each interface, glows green to indicate that the interface is connected. The Activity LED, on the bottom right of each interface, flashes yellow when activity occurs on the network connection. IP500 Series Installation Guide...

  • Page 32: Figure 6 Ethernet Interfaces

    All manuals and user guides at all-guides.com Installing the IP500 Series Appliance Figure 6 Ethernet Interfaces Port 1 Port 4 Link LED Activity LED 00080 The first port (at the extreme left) is port 1. The next is port 2, and so on.

  • Page 33: Configuring The Appliance

    All manuals and user guides at all-guides.com Configuring the Appliance The first time you turn the power on to an IP500 Series appliance, a system-startup utility prompts you to configure network connectivity and access to the admin account. You can configure the appliance using two methods:...

  • Page 34: Using A Console Connection To Configure The Appliance

    You can use any alphanumeric characters in upper or lower case (a to z, 0 to 9), dashes (–), and dots (.). The hostname is case sensitive. Every time you enter the hostname you must do so in exactly the same way. IP500 Series Installation Guide...

  • Page 35: Using The System Startup Utility

    Using the System Startup Utility System startup is part of the IPSO software that is built into the IP500 Series appliance. When you turn on the IP500 Series appliance for the first time, the console or terminal screen displays miscellaneous information (such as memory checks).
  • Page 36 All manuals and user guides at all-guides.com Configuring the Appliance Establishing a Password The IP500 Series appliance has two types of accounts: The monitor account, which provides read permission, does not allow a user to configure the IP500 Series appliance.
  • Page 37 Select the interface to use to configure the appliance over a LAN. System startup displays the physical IDs of the appliance interfaces. The display depends on your specific hardware configuration. The system startup interface screen is similar to that shown in Figure IP500 Series Installation Guide...

  • Page 38: Figure 7 Sample System Startup Interface Selection Screen

    Step 4. When you finish changing entries, confirm your entries by typing Y. This action returns you to the menu in Step 4. Type 4 on this menu, to leave system startup. IP500 Series Installation Guide...

  • Page 39: Using The Dhcp Client To Configure The Appliance

    You must first configure a DHCP server with (at a minimum): Mappings for a host name for the IP system Serial number of the system, or the static MAC address of a NIC installed in the system The minimum IP address lease required is one year. IP500 Series Installation Guide...
  • Page 40 All manuals and user guides at all-guides.com Configuring the Appliance Note The DHCP server must be on the same network as your Nokia IP system or the DHCP/BOOTP relay must be configured on the intermediate routers. Following is an example of relevant DHCP configuration information: ddns-update-style ad-hoc;...

  • Page 41: Configuring Network Interfaces With Voyager

    Accessing Voyager Reference Information As you use Voyager, the Voyager Reference Guide and Voyager inline help are available for you to use. Figure 8 shows where you can access both information sources from the Voyager interface. IP500 Series Installation Guide...

  • Page 42: Figure 8 Voyager Reference Access Points

    The Voyager Reference Guide is the reference source for Voyager. To access this source, click the Doc button. You can also access the Voyager Reference Guide at the Nokia support site (https://support.nokia.com) or on the CD that was delivered with your system (see doc\voyager_guide.pdf).

  • Page 43: Voyager Port Naming Conventions

    Define the proxy ARP to support network address translation through the ARP link on the Voyager Configuration page. For information about accessing Voyager and the related reference materials, see “To open Voyager” on page 41. IP500 Series Installation Guide...
  • Page 44 This name and IP address are used to synchronize the management computer with the network security platform. The name is case sensitive on all computers. IP500 Series Installation Guide...

  • Page 45: Completing The Configuration

    Voyager inline help. Using Voyager to Monitor an IP500 Series Appliance After you install and configure your IP500 Series appliance, you can use Voyager to monitor its operation. To use Voyager to monitor the operation of the appliance, click Monitor from the Voyager home page to access the monitoring functions.
  • Page 46 All manuals and user guides at all-guides.com Configuring the Appliance IP500 Series Installation Guide...

  • Page 47: Installing And Replacing Network Interface Cards

    Protect the appliance and NICs from static discharge by ensuring that you are properly grounded before you touch these components. Warning When you handle a NIC, be careful not to damage the EMI shield on its top edge. IP500 Series Installation Guide...

  • Page 48: Before You Begin

    Installing a NIC into the Appliance IP500 Series appliances are available with different hardware configurations, so the front of the appliance may have different NICs and different numbers of cover plates (the plates that cover the cPCI slots in which no NICs are installed).

  • Page 49: Figure 10 Two Nics And One Cover Plate

    Retaining bracket To remove a NIC from the appliance 1. Loosen the two retaining screws using a Phillips-head screwdriver. 2. Push the lock on the retaining bracket to the right. The card protrudes from the appliance. 00078-1 IP500 Series Installation Guide...
  • Page 50 3. Use the bracket to pull the card from the appliance. To remove the cover plate 1. Loosen the retaining screws. The screws extend out from the cover plate. 2. Holding the screws, pull the cover plate from the appliance. 00078-2 IP500 Series Installation Guide...
  • Page 51 All manuals and user guides at all-guides.com Installing a NIC into the Appliance To insert a new NIC or replace a NIC 1. Insert the NIC into the appliance. 00078-3 2. Tighten the retaining screws. The bracket snaps into place. 00078-4 IP500 Series Installation Guide...

  • Page 52: Final Installation Steps

    After inserting the NIC, turn on the power, by toggling the on-off switch on the rear of the appliance to the right. For information about installing and configuring specific NICs, see the next chapter, Chapter 5, “Interface Card Reference Information.” IP500 Series Installation Guide...

  • Page 53: Interface Card Reference Information

    The cards are discussed in the following alphabetical order: ATM NIC Specifications E1 NIC Specifications 10/100 Ethernet NIC Specifications Gigabit Ethernet NIC Specifications HSSI NIC Specifications ISDN NIC Specifications T1 NIC Specifications V.35 and X.21 Serial NIC Specifications IP500 Series Installation Guide...

  • Page 54: General Procedures

    All NICs require that you follow these procedures: 1. If not inserted at the factory, insert the NIC into one of the three slots on the left of the IP500 Series appliance. The slots are numbered 1, 2, and 3, from top to bottom.

  • Page 55: Connectors And Cables

    The Link LED on the NIC glows green when a link is established. E1 NIC Specifications The IP500 Series appliance supports an E1 NIC with the following features: Provides direct high-speed access over a leased line Supports operation at 2.048 Mbps...

  • Page 56: Connectors And Cables

    Connect the NIC to the E1 service by using the supplied cable. The EI NIC uses an RJ-48 connector. The RJ-48 is numbered from right to left, with the copper pins facing up and toward you. Nokia recommends that you use the supplied cable. Use of another cable is at customer discretion. Caution Cables connecting to the E1 NIC must be a minimum of 26 AWG wire.

  • Page 57: Figure 13 Four-Port Ethernet Nic Front Panel

    To use the cPCI v2 Ethernet card shown in Figure 13, you must be running IPSO v3.5 FCS8 or later. If you are not running IPSO v3.5 FCS8 or later and you need to use these cards, contact Nokia Customer Support. For contact information, see “NOKIA CONTACT INFORMATION”...

  • Page 58: Connectors And Cables

    The interface between a NIC receptacle and an Ethernet cable is RJ-45. To connect to a 10-Mbps or 100-Mbps hub, use a straight-through RJ-45 cable. Figure 14, the RJ-45 cable output connector is numbered from right to left, with the copper pins facing up and toward you. IP500 Series Installation Guide...

  • Page 59: Figure 14 Ethernet Cable Connector Output Pin Assignments

    10/100 Ethernet NIC Specifications Figure 14 Ethernet Cable Connector Output Pin Assignments Pin# Assignment 00113b To connect directly to a host, use an RJ-45 crossover cable wired as shown in Figure Figure 15 Ethernet Crossover Cable Pin Connections IP500 Series Installation Guide...

  • Page 60: Gigabit Ethernet Nic Specifications

    As data is transmitted, the activity LEDs on the appliance glow. Gigabit Ethernet NIC Specifications The IP500 Series appliance supports both single-port and a dual-port Gigabit Ethernet NICs, which provide the following features: High bandwidth...

  • Page 61: Figure 16 Single-Port Gigabit Ethernet Nic Front Panel

    LC receptacle 2 Link Link Transmit LED (yellow) 00239 Receive LED (yellow) Link LED (green) Note The IP500 NSP supports no more than two dual-port Gigabit Ethernet NICs installed in an appliance at any one time. IP500 Series Installation Guide...

  • Page 62: Ipso Version Requirement

    LC-to-LC cable for loopback purposes. An LC-to-SC cable is included with single-port Gigabit Ethernet NICs, and two LC-to-SC cables are included with dual-port Gigabit Ethernet NICs. You can order additional cables from a cable vendor of your choice. IP500 Series Installation Guide...

  • Page 63: Hssi Nic Specifications

    Backup Traffic port 1 Traffic port 2 Card Type Slot # Dual-port Gigabit Ethernet Single-port Gigabit Ethernet Dual-port Gigabit Ethernet HSSI NIC Specifications The IP500 Series appliance supports a high-speed serial interface (HSSI) NIC with the following features: IP500 Series Installation Guide...

  • Page 64: Connectors And Cables

    Table 6 Signal and Pin Assignments for a HSSI NIC Pin Number EIA Circuit Number Signal HSSI Designation TX clock in + TX clock in - TX clock out + TX clock out - TX data out + IP500 Series Installation Guide...
  • Page 65 Loopback A out - Loopback B out + Loopback B out - Loopback C in + Loopback C in - Test mode in + Test mode in - 1, 7, 13, 15, 16, Signal common 8, 24, 30, 31, IP500 Series Installation Guide...

  • Page 66: Figure 20 Pin Connections For 9-Pin To 25-Pin Null-Modem

    Use a null-modem cable when directly connecting a console to an IP500 Series appliance. Figure 20 shows pin connections for a 9-pin to 25-pin null-modem cable. Figure 20 Pin Connections for 9-pin to 25-pin Null-Modem Cable IP500 Series Installation Guide...

  • Page 67: Isdn Nic Specifications

    Figure 21 Pin Connections for 9-pin to 9-pin Null-Modem Cable ISDN NIC Specifications The IP500 Series appliance supports a single-port, basic-rate ISDN (BRI) card configured as a terminal equipment device. The NIC is designed for point-to-point and multipoint connections through the S/T interface.

  • Page 68: Connectors And Cables

    Cables that connect to an ISDN NIC must be a minimum 26 AWG wire. T1 NIC Specifications The IP500 Series appliance supports a serial T1 NIC. The NIC is available in two configurations: original equipment manufacturer (OEM) and Nokia, as...

  • Page 69: T1 Crossover Cable

    LEDs PORT 1 ACTV LPBK 00012br Figure 24 Nokia T1 NIC RJ-48 connector LEDs 00009br Both versions of this NIC use an RJ-48 connector. To connect to the T1 service, use a straight-through cable. If you plan to connect to another CSU/ DSU, use a crossover cable.

  • Page 70: V.35 And X.21 Serial Nic Specifications

    The RJ-48 cable is numbered from right to left, with the copper tabs facing up and toward you. V.35 and X.21 Serial NIC Specifications The IP500 Series appliance supports selected V.35 and X.21 serial NICs, which have the following features: Line speed to full T1 and E1...

  • Page 71: Figure 25 Typical Single-Port V.35 Or X.21 Nic Front Panel

    If the CSU/DSU cannot supply a clock, select internal clock and set the clock speed in Voyager. You can, however, connect the card directly to a frame relay switch or to a Cisco network security platform serial port. IP500 Series Installation Guide...

  • Page 72: Connectors And Cables

    To connect the card directly to a Cisco network security platform, use a Cisco DCE cable. You can determine the interface type (V.35 or X.21) by looking at the connector on the front panel of the card. The following figures show the physical configuration for each connector type. IP500 Series Installation Guide...

  • Page 73: Figure 27 Output Connector For The V.35 Cable

    Local Loopback J H Data Terminal Ready Received Data R P Transmitted Data Received Data T S Transmitted Data Receive Timing V U Terminal Timing Receive Timing X W Terminal Timing Y Transmit Timing AA Transmit Timing 00111 IP500 Series Installation Guide...

  • Page 74: Figure 28 Output Connector For The X.21 Cable

    Receive Data (B) 11 4 Received Data (A) Indicate (B) 12 5 Indicate (A) Signal Timing Element (B) 13 6 Signal Timing Element (A) Byte Timing (B) 14 7 Byte Timing (A) 8 Signal Ground 00112 IP500 Series Installation Guide...

  • Page 75: Installing And Replacing Other Components

    Caution Components on the IP500 Series appliance are not hot swappable. Turn off power to the appliance before you replace or add components. IP500 Series Installation Guide...

  • Page 76: Basic Procedures

    Access the power supply and fan units from the rear of the appliance. The disk-drive unit and power supply have external handles, which you should use when you remove the component from the IP500 Series appliance. The fan unit does not have handles.
  • Page 77 2. Remove the power cord from the socket on the rear of the appliance. 00079-7 3. Loosen the retaining screws on both the sides of the component by turning the screws to the left as far as they will go. 00079-2 4. Pull the component out of the appliance. IP500 Series Installation Guide...
  • Page 78 5. Slide the new component into the appliance. For the disk-drive unit, before inserting the component all the way, first attach the I/O and power cables to the back of the component. For more information about replacing or installing the disk-drive unit, see IP500 Series Installation Guide...
  • Page 79 Basic Procedures “Replacing or Adding a Disk-Drive Unit.” Slide the component into the appliance, until it locks into place. 00079-4 6. Tighten the retaining screws on both sides of the component by turning to the right. 00079-5 IP500 Series Installation Guide...
  • Page 80 All manuals and user guides at all-guides.com Installing and Replacing Other Components 7. Reinsert the power cord. 00079-8 8. Turn on the power. 00079-6 IP500 Series Installation Guide...

  • Page 81: Replacing Or Adding A Disk-Drive Unit

    All manuals and user guides at all-guides.com Replacing or Adding a Disk-Drive Unit Replacing or Adding a Disk-Drive Unit An IP500 Series appliance has two disk drive slots on the front of the appliance, as shown in Figure 29. The green LED underneath each slot flashes when activity occurs on the drive.

  • Page 82: Installing And Replacing The Disk-Drive Unit

    2. Cut the cable tie that attaches the cable ends to the carrier to allow the cables to be plugged into the new hard drive. Figure 30 Figure 31 shows the removal and installation process using slot A as an example. IP500 Series Installation Guide...

  • Page 83: Figure 30 Detaching I/O And Power Cables

    All manuals and user guides at all-guides.com Replacing or Adding a Disk-Drive Unit Figure 30 Detaching I/O and Power Cables Detach connectors and cables from the disk-drive unit. 00074-2 IP500 Series Installation Guide...

  • Page 84: Replacing Or Upgrading Memory

    00074-1 Replacing or Upgrading Memory The IP500 Series appliance base system comes with 256 MB of RAM, which is provided using either two 128-MB DIMMs or one 256-MB DIMM. The IP500 appliance has a total of four DIMM sockets.

  • Page 85: Before You Begin

    To upgrade memory in your appliance, you need the following: Physical access to the appliance A Phillips-head screwdriver The appropriate number of Nokia memory upgrade kits, each of which includes one 256-MB DIMM Access to the appliance through Voyager or Lynx...

  • Page 86: Adding Or Replacing Dimms

    2. Remove the three screws from the top rear of the appliance. 3. Remove the power supply unit and fan tray assembly from the rear of the appliance. 4. The top cover has four pins on the left and right sides. IP500 Series Installation Guide...
  • Page 87 Power supply unit Fan tray assembly Top-cover screws Top Cover 00119rev 5. The memory sockets are located on the right side of the appliance motherboard, looking at the appliance from the front, as the following figure shows. IP500 Series Installation Guide...
  • Page 88 6. Press the two retaining clips outward and carefully pull each DIMM upward as shown in the following figure. You might need to pull opposite ends of each DIMM alternately to gradually free them from the contact pins. IP500 Series Installation Guide...
  • Page 89 The DIMM only fits into the socket and locks into place when they do. The clips automatically lock the DIMM into place. 8. Push the DIMM into the socket until it clicks into place, as shown in the following figure. IP500 Series Installation Guide...
  • Page 90 12. Insert and tighten the middle screw. 13. Reconnect the power cord. 14. Turn on the power. The appliance automatically recognizes the new memory configuration. You can verify this by using Voyager or Lynx to view the main page for the appliance. IP500 Series Installation Guide...

  • Page 91: Installing The Pcmcia Modem

    The front of each appliance has a PCMCIA slot that accepts two PCMCIA cards. Each appliance supports only one modem at a time (either external or PCMCIA). Figure 32 PCMCIA Slot Location on an IP500 Series Appliance ACTIVITY ACTIVITY HDD B...
  • Page 92 All manuals and user guides at all-guides.com Installing and Replacing Other Components To set up a modem with the IP500 Series appliance 1. Orient the modem cable-connector port as shown in Figure 32, and insert the Nokia-approved modem into either the top or bottom PCMCIA slot until the modem clicks into place.

  • Page 93: Installing The Nokia Encryption Accelerator Ii Card

    Installing the Nokia Encryption Accelerator II Card Installing the Nokia Encryption Accelerator II Card The IP500 Series appliance supports the Nokia Encryption Accelerator II. This card provides high-speed cryptographic processing that enhances VPN performance. The accelerator card comes in a PMC format for the IP500 Series appliance.

  • Page 94: Opening The Appliance

    On the bottom of the card are two male PMC connectors and four holes for Phillips screws. Opening the Appliance Warning To minimize the risk of electrical shock, disconnect power to the appliance before you open the appliance. IP500 Series Installation Guide...
  • Page 95 All manuals and user guides at all-guides.com Installing the Nokia Encryption Accelerator II Card To open the appliance 1. Use Voyager or Lynx to halt the appliance. 2. Turn off the power and remove the power cord from the appliance.

  • Page 96: Attaching The Accelerator Card To The Motherboard

    Four standoffs (small tubes or risers) protrude upward from the motherboard. These components are shown in part A of Figure Figure 33 PMC Connector Locations Standoffs. Insert the VPN card into connectors. Screw card into standoffs. 00140 IP500 Series Installation Guide...
  • Page 97 The four screw holes and four standoffs should also be aligned with one another. Caution If the IP500 Series appliance motherboard was built before May 2002, the standoff holes to the power connector will not line up. Do not install the fourth screw into the misaligned standoff hole.You can install three of the screws without affecting the operation of the encryption accelerator card.

  • Page 98: Reassembling The System

    Make sure that the four pins on the left and right of the cover fit into the corresponding lips on the left and right of the chassis. Once they do, you can push the cover toward the front of the chassis until it locks into place. IP500 Series Installation Guide...

  • Page 99: Enabling The Card

    All manuals and user guides at all-guides.com Installing the Nokia Encryption Accelerator II Card 2. Insert and tighten the screws on the left and the right of the cover but not the middle screw. 3. Replace the power supply unit and the fan unit.
  • Page 100 4. At Hardware Device Configuration, click On. 5. Click Apply to enable the card. You can also monitor Nokia encryption accelerator card interfaces with Voyager. For more information about accessing Voyager and locating relevant reference materials, see the Voyager Reference Guide.

  • Page 101: Using The Boot Manager

    All manuals and user guides at all-guides.com Using the Boot Manager The IP500 Series platform incorporates a boot manager in a flash disk to control the boot-up process. The boot manager allows you to perform a number of tasks, including:...

  • Page 102: Boot Manager Variables

    Autoboot—If autoboot is set to no, the IP500 Series appliance stops at the boot manager command line during the boot process. If autoboot is set to yes, the IP500 Series appliance does not stop at the boot manager command line during the boot process. It does wait for the amount of time specified in bootwait for input from the keyboard.

  • Page 103: Viewing Variable Values And Other System Parameters

    Verbose mode. Verbose during device probing and thereafter. Do not identify the flash disk as wd0. This command is always needed for the IP500 Series appliances and is automatically entered by the boot manager. Boot-device—The device from which the boot file loads.
  • Page 104 Alias 4: net2 aliased to eth-s3p2 Alias 5: <empty> Alias 6: <empty> Alias 7: <empty> BOOTMGR[47]> sysinfo Use the command to view system information such as CPU speed, sysinfo memory size, and so forth. The command has the following form: sysinfo IP500 Series Installation Guide...
  • Page 105 0:a0:8e:40:92:3e speed 10M half duplex eth2: flags=130<BROADCAST,MULTICAST,PRESENT> ether 0:a0:8e:40:92:3f speed 10M half duplex eth3: flags=130<BROADCAST,MULTICAST,PRESENT> ether 0:a0:8e:40:92:3c speed 10M half duplex eth4: flags=130<BROADCAST,MULTICAST,PRESENT> ether 0:a0:8e:40:92:3d speed 10M half duplex BOOTMGR[2]> IP500 Series Installation Guide...

  • Page 106: Setting The Variables

    Use the command to view the contents of directories on the devices in your IP500 Series appliance. The command has the following form: ls device directory where device is the device that contains the directory you want to look at, and directory is the directory on that device.
  • Page 107 If name is not specified, all variables are set to their factory defaults. For example: BOOTMGR[2]> set-defaults autoboot sets the value of autoboot to yes, the factory default. IP500 Series Installation Guide...

  • Page 108: Other Boot Manager Commands

    For example: BOOTMGR[2]> unsetalias disk deletes the disk alias from the list of aliases. Other Boot Manager Commands halt Use the command to halt the system. The command has the following halt form: halt IP500 Series Installation Guide...

  • Page 109: Booting The System

    If so, it uses that value; if not, it defaults to the default listed in the following table. Argument Default boot-device wd0 (the hard-disk drive unit) boot-file /image/current/kernel boot-flags IP500 Series Installation Guide...

  • Page 110: Using The Boot Manager To Install Ipso

    Caution A full installation using the install command deletes the existing database on the IP500 Series appliance. To use the boot manager to install a new copy of the operating system (IPSO) kernel, perform the following steps: 1. At the boot manager command prompt, enter: BOOTMGR[0]>install...

  • Page 111: Protecting The Boot Manager With A Password

    Protecting the Boot Manager with a Password Protecting the Boot Manager with a Password To prevent accidental or unauthorized access to the IP500 Series appliance hard-disk drive unit, you can require that the user enter a password to access command in boot manager. Use the...

  • Page 112: Installing The Boot Manager

    All manuals and user guides at all-guides.com Using the Boot Manager 6. Turn off the power to the IP500 Series appliance. 7. Reinstall the hard-disk drive unit. 8. Turn on the power to IP500 Series appliance. Installing the Boot Manager The boot manager is installed at the factory.

  • Page 113: Upgrading The Boot Manager

    To upgrade the boot manager 1. Obtain the upgraded boot-manager image from the appropriate Nokia customer support site as listed in the Nokia Contact Information section at the front of this guide. 2. Start the IP500 Series appliance in single-user mode.
  • Page 114 All manuals and user guides at all-guides.com Using the Boot Manager IP500 Series Installation Guide...

  • Page 115: Troubleshooting

    All manuals and user guides at all-guides.com Troubleshooting This chapter describes problems you might encounter with an IP500 Series appliance, potential causes for these problems, and possible solutions. The last section of this chapter provides information about how to use the program during troubleshooting.

  • Page 116: Access And Login Problems

    Solution Make sure that the terminal settings are: 8 data, 1 stop, no parity, 9600 bps, no flow control. Problem The appliance or file system is defective. Solution Contact Nokia Customer Support. For information about contacting Nokia Customer Support, see “NOKIA CONTACT INFORMATION”...
  • Page 117 Problem You have entered the wrong password. Solution Enter a correct password. You can find the procedure for changing the admin password in the Nokia Knowledge Base by contacting Nokia Customer Support. Return the database to the default settings and then run through the system- startup procedure again.
  • Page 118 Problem The link speed is wrong. Solution Verify that the port on the host and the port on the IP500 Series appliance are set for the same speed (10 Mbps/100 Mbps). A solid data- activity LED on a port indicates a speed mismatch.

  • Page 119: Interface Problems

    No link light appears when you connect the port Problem You might have used the wrong cable. Solution Use a crossover cable between the IP500 Series appliance and a host, and a straight-through cable between the appliance and a hub.

  • Page 120: Connectivity Problems

    Connectivity Problems Unable to ping through the appliance Troubleshooting Tip Localize the problem by issuing pings to various network interfaces on the IP500 Series appliance. Use tcpdump to trace packets leaving or entering a port. For more information, see “Filtering Traffic with tcpdump”...

  • Page 121: Routing Problems

    “Filtering tcpdump Traffic with tcpdump” on page 126. Under Routing Options in the Routing Configuration section in Voyager, you can also enable several types of trace options for OSPF. These traces are logged in /var/tmp/ipsrd.log IP500 Series Installation Guide...

  • Page 122: Rip Problems

    RIP. These traces are logged in /var/tmp/ipsrd.log. Problem Inconsistent subnet masks are in use on the network. Solution RIP version 1 must use consistent subnet masks. If you need to use inconsistent subnet masks, change to RIP v2 or OSPF. IP500 Series Installation Guide...

  • Page 123: Problems Exchanging Routes

    Problem The power supply is not providing power. Solution Check the power source. If there is no power at the source, take appropriate action such as inserting a new fuse or resetting the circuit breaker. IP500 Series Installation Guide...

  • Page 124: Multicast Problems

    The IPSO software includes the utility. Use to view traffic tcpdump tcpdump on a network, much like the or snoop programs of a UNIX tcpdump IP500 Series Installation Guide...

  • Page 125: Tcpdump Command Basics

    -i eth-s2p3c0 proto ospf The following command returns IGRP traffic: tcpdump -i eth-s2p1c0 proto igrp To View Packets Running the IGMP Protocol tcpdump -i interface proto igmp The following command returns packets passing through the specified interface: IP500 Series Installation Guide...

  • Page 126: Filtering Traffic With Tcpdump

    80: tcpdump -i eth-s1p1c0 not port 80 To Delimit the Size of the Packet tcpdump -i interface -s packet-size -vv The following command returns 320 bytes of the packet: tcpdump -i eth-s1p1c0 -s 320 -vv IP500 Series Installation Guide...

  • Page 127: Saving Tcpdump Results To A Local File

    Note The trace file grows very quickly if the network being viewed is busy. Nokia recommends that you create the trace file on the /var partition. The following command writes packet information to tracefile: tcpdump -i eth-s1p1c0 -w /var/tmp/tracefile Press Ctrl + C to end the capture and print the number of packets captured.
  • Page 128 The following command returns all IGRP traffic connected to that interface: tcpdump -i eth-s1p1c0 -s 320 -vv proto igrp The following command returns all Telnet traffic connected to that interface: tcpdump -i eth-s1p1c0 port 23 Read the trace file with the following command: tcpdump -r /var/tmp/tracefile IP500 Series Installation Guide...

  • Page 129: A Technical Specifications

    All manuals and user guides at all-guides.com Technical Specifications The tables in this appendix provide technical specifications for the IP500 Series appliance. IP500 Series Installation Guide...

  • Page 130: Physical Dimensions

    IEEE 802.3z Gigabit Ethernet, single- or dual-port, LC-to-SC Ethernet full-duplex multi-mode fiber HSSI 60-pin HSSI connection SCSI-2 ISDN Two bearer channels: 64 kbits/sec RJ-45 Native T1 connection RJ-48 V.35 V.35 (DB-26 to V.35 adapter cable) DB-26 IP500 Series Installation Guide...

  • Page 131: Environmental

    Storage to 158 to 70 Electrical Voltage 110 and 220 V AC Frequency 60 and 50 Hz Amps 2 at 110 V; 1 at 220 V Watts 230 watts Pressure Maximum 11,500 ft 3500 m Altitude IP500 Series Installation Guide...
  • Page 132 All manuals and user guides at all-guides.com Technical Specifications IP500 Series Installation Guide...

  • Page 133: B Cables

    IP500 Series NSP. Ethernet Crossover Cable Use the Ethernet crossover cable to directly connect an Ethernet port on an IP500 Series appliance to an RJ-48 Ethernet port on a host. Figure 34 shows pin connections for an Ethernet crossover cable.

  • Page 134: T1 Crossover Cable

    Use a T1 crossover cable to connect two units, when you use T1 connections between DSU/CSUs. The following figure shows pin connections for this cable. The RJ-48 cable is numbered from right to left, with the copper tabs facing up and toward you. IP500 Series Installation Guide...

  • Page 135: Null-Modem Cable

    All manuals and user guides at all-guides.com Null-Modem Cable Null-Modem Cable Use a null-modem cable to directly connect a console to an IP500 Series NSP. Figure 35 shows pin connections for a 9-pin to 25-pin null-modem cable. Figure 35 Pin Connections for 9-pin to 25-pin Null-Modem Cable...

  • Page 136: Figure 36 Pin Connections For 9-Pin To 9-Pin Null-Modem

    All manuals and user guides at all-guides.com Cables Figure 36 shows pin connections for a 9-pin to 9-pin null modem cable. Figure 36 Pin Connections for 9-pin to 9-pin Null-Modem Cable IP500 Series Installation Guide...

  • Page 137: C Warranty And Software License

    Software is used solely on behalf of and for the benefit of a single client on the single piece of equipment provided by Nokia. An MSP may discontinue use of the Software on behalf of one client and use the Software to provide managed services to another single client.
  • Page 138 Furthermore, the above warranty does not apply to any portion of the product supplied by a third party. In no event does Nokia warrant that the Software is error-free or that the Customer will be able to operate it without problems or service interruptions.
  • Page 139 US. Government shall be governed solely by the terms of this Agreement and shall be prohibited except to the extent expressly permitted by the terms of this Agreement. IP500 Series Installation Guide...
  • Page 140 All manuals and user guides at all-guides.com Warranty and Software License IP500 Series Installation Guide...

  • Page 141: D General Public Licensed Software

    Nokia Inc. offers to provide machine-readable source code on industry- standard media to the recipient of the Nokia Inc. modified READLINE and GDB code for a period of three (3) years from the date of Nokia Inc.’s distribution of READLINE and GDB, or until January 1, 2003, whichever is longer.

  • Page 142: Gnu General Public License

    You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. IP500 Series Installation Guide...

  • Page 143: Modification

    License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by IP500 Series Installation Guide...
  • Page 144 Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as IP500 Series Installation Guide...
  • Page 145 For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed IP500 Series Installation Guide...
  • Page 146 (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent IP500 Series Installation Guide...
  • Page 147 License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software IP500 Series Installation Guide...
  • Page 148 LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS IP500 Series Installation Guide...

  • Page 149: E Compliance Information

    All manuals and user guides at all-guides.com Compliance Information This appendix contains the following compliance information: Declaration of Conformity Compliance Statement FCC Notice (US) FCC Requirements (US) Equipment Attachment Regulations (Canada) IP500 Series Installation Guide...

  • Page 150: Declaration Of Conformity

    Serial Number: 1 to 100,000 Date First Applied: 2002 conforms to the following standards: Safety: EN60950:1992, A1,A2:1993, A3:1995, A4:1997, A11:1998 with Japanese National Deviation EMC: EMC:EN50024, EN55022A 1998, CISPR 22 Class A 1985, EN61000- 3-2, EN61000-3-3 IP500 Series Installation Guide...
  • Page 151 Low Voltage Directive 73/23/EEC and the EMC Directive 89/336/EEC with Amendment 93/68/EEC. Alan Hutchinson Manager Regulatory Compliance Engineering Mountain View, California August 2002 European contact: Greg Shortell Nokia Telecommunications 2 Heathrow Blvd, 284 Bath Road Heathrow, Middlesex, UB7 ODQ England IP500 Series Installation Guide...

  • Page 152: Compliance Statement

    EN55022A: (CISPR 22, Class A) European Community (CE) Immunity EN55024 European Community (CE) EN61000-4-2 EN61000-4-3 EN61000-4-4 EN61000-4-5 EN61000-4-6 EN61000-4-8 EN61000-4-11 ENV50204 Harmonics and Voltage Fluctuation EN61000-3-2 European Community (CE) EN61000-3-3 European Community (CE) Safety UL60950 CAN/CSA-C22.2, No. 950 Canada IP500 Series Installation Guide...

  • Page 153: Fcc Notice (Us)

    Reorient or relocate the receiving antenna. Increase the separation between the computer and receiver. IP500 Series Installation Guide...

  • Page 154: Fcc Requirements (Us)

    The telephone company may make changes in its communications facilities, equipment, and operation procedures, where such action is reasonably required in the operation of its business and is not inconsistent with the rules and regulations of the Federal Communications Commission. If they do, you IP500 Series Installation Guide...

  • Page 155: Equipment Attachment Regulations (Canada)

    NOTICE: The Industry Canada label identifies certified equipment. This certification means that the equipment meets telecommunications network protective, operational and safety requirements as prescribed in the appropriate Terminal Equipment Technical Requirements document(s). The Department does not guarantee the equipment will operate to the user’s IP500 Series Installation Guide...
  • Page 156 This precaution may be particularly important in rural areas. Caution Users should not attempt to make such connections themselves, but should contact the appropriate electric inspection authority, or electrician, as appropriate. IP500 Series Installation Guide...
  • Page 157 102 unsetalias 108 boot-flags variable 102 unsetenv 107 bootwait variable 102 compliance specifications 151 browser 36 safety standards 152 choosing a browser type for components 24 configuration 35 configuration, appliance 33 IP500 Series Installation Guide Index - 157...
  • Page 158 HyperTerminal, using 30, 48 width 130 DIMM problems 124 disk drive unit adding 81 I/O cable, detaching 78 replacing 81 iclid, troubleshooting 121 disk mirroring 81 initial configuration, confirming the setup 38 install command 110 Index - 158 IP500 Series Installation Guide...
  • Page 159 All manuals and user guides at all-guides.com installation Lynx IP500 Series appliance 29 completing the configuration using 45 space requirements 26 starting 37 stacked 27 using 37 interface DTE 30 duplex 38 mask length 38 entering initial information 37 modem, installing 91...
  • Page 160 152 OSPF does not operate 122 technical 129 receive login prompt, password not specifications, environmental 131 accepted 117 standards, compliance 149 RIP 122 static discharge, preventing 47, 86 routing 121 sysinfo command 104 Index - 160 IP500 Series Installation Guide...
  • Page 161 108 unsetenv command 107 upgrading boot manager 113 username, entering 45 variables autoboot 102 boot flag 102 boot manager 102 boot-device 103 boot-file 102 bootwait 102 setting 106 viewing values for 103 IP500 Series Installation Guide Index - 161...
  • Page 162 All manuals and user guides at all-guides.com Index - 162 IP500 Series Installation Guide...

This manual is also suitable for:

Ip530

Table of Contents