Nokia EM7500, Installation Manual

Page 1: ...Published April 2006 Model Number EM7500 Product Name IP390 105i 105s Security Platform Installation Guide Preliminary All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 2: ...d any express or implied warranties including but not limited to implied warranties of merchantability and fitness for a particular purpose are disclaimed In no event shall Nokia or its affiliates subsidiaries or suppliers be liable for any direct indirect incidental special exemplary or consequential damages including but not limited to procurement of substitute goods or services loss of use data...

Page 3: ...7 7089 email info ipnetworking_americas nokia com Europe Middle East and Africa Nokia House Summit Avenue Southwood Farnborough Hampshire GU14 ONG UK Tel UK 44 161 601 8908 Tel France 33 170 708 166 email info ipnetworking_emea nokia com Asia Pacific 438B Alexandra Road 07 00 Alexandra Technopark Singapore 119968 Tel 65 6588 3364 email info ipnetworking_apac nokia com Web Site https support nokia ...

Page 4: ...4 IP390 105i 105s Security Platform Installation Guide All manuals and user guides at all guides com ...

Page 5: ...ernet Ports 21 PMC Expansion Slots 22 System Status LEDs 23 Managing the Appliance 24 Logging Options 25 Using Hard Disk Drives for Logging 25 Using a Flash Memory PC Card for Logging 25 Site Requirements Warnings and Cautions 26 Software Requirements 27 Product Disposal 27 2 Installing the Nokia IP390 Appliance 29 Before You Begin 29 Rack Mounting the Appliance 30 Connecting Power 31 Connecting t...

Page 6: ...ring and Activating Interfaces 59 Monitoring Network Interface Cards 59 5 Connecting PMC Network Interface Cards 61 Four Port 10 100 Mbps Ethernet NICs 61 Ethernet NIC Features 62 Ethernet NIC Connectors and Cables 63 Two Port Copper Gigabit Ethernet Network Interface Card 65 Copper Gigabit Ethernet NIC Features 65 Copper Gigabit Ethernet Connectors and Cables 66 Two Port Fiber Optic Gigabit Ether...

Page 7: ...gging 84 Replacing or Upgrading Memory 86 Before You Start 87 7 Troubleshooting 93 General Troubleshooting Information 93 Troubleshooting Routing Problems 103 A Technical Specifications 109 Physical Dimensions 109 Space Requirements 109 Operating Temperature 110 NIC Interfaces 110 B Compliance Information 111 Declaration of Conformity 111 Compliance Statements 113 FCC Notice US 114 Index 115 All m...

Page 8: ...8 IP390 105i 105s Security Platform Installation Guide All manuals and user guides at all guides com ...

Page 9: ...Text Conventions 17 Table 3 Specifications for the IP390 Platform 20 Table 4 PMC Network Interface Card Slots 22 Table 5 System Status LEDs 23 Table 6 Pin Assignments for Console Connector and Cable 36 Table 7 Pin Assignments for AUX Connector and Modem Cable 37 All manuals and user guides at all guides com ...

Page 10: ...10 IP390 105i 105s Security Platform Installation Guide All manuals and user guides at all guides com ...

Page 11: ...s 47 Figure 10 Four Port Ethernet NIC Front Panel Details 62 Figure 11 Output Connector for the Ethernet Cable 64 Figure 12 Ethernet Crossover Cable Pin Connections 64 Figure 13 Gigabit Ethernet Crossover Cable Pin Connections 65 Figure 14 Two Port Copper Gigabit Ethernet NIC 66 Figure 15 Copper Gigabit Ethernet Cable Connector Output Pin Assignments 67 Figure 16 Gigabit Ethernet Crossover Cable P...

Page 12: ...12 IP390 105i 105s Security Platform Installation Guide All manuals and user guides at all guides com ...

Page 13: ...n this Guide This guide is organized into the following chapters and appendixes Chapter 1 Overview presents a general overview of the appliance Chapter 2 Installing the Nokia IP390 Appliance describes how to rack mount the appliance and how to physically connect it to a network and power Chapter 3 Performing the Initial Configuration describes how to make the appliance available on the network Cha...

Page 14: ...se problems Appendix A Technical Specifications provides technical specifications such as interface characteristics Appendix B Compliance Information provides compliance and regulatory information Conventions this Guide Uses The following sections describe the conventions this guide uses including notices text conventions and command line conventions Notices Warning Warnings advise the user that b...

Page 15: ...ort word that invokes the product or calls the compiler or preprocessor script for a compiled Nokia product It might appear alone or precede one or more options You must spell a command exactly as shown and use lowercase letters Italics Indicates a variable in a command that you must supply For example delete interface if_name Supply an interface name in place of the variable For example delete in...

Page 16: ...ceding hyphen ext A filename extension such as ext might follow a variable that represents a filename Type this extension exactly as shown immediately after the name of the file The extension might be optional in certain products Punctuation and mathematical notations are literal symbols that you must enter exactly as shown Single quotation marks are literal symbols that you must enter as shown Ta...

Page 17: ...e nat Key names Keys that you press simultaneously are linked by a plus sign Press Ctrl Alt Del Menu commands Menu commands are separated by a greater than sign Choose File Open The words enter and type Enter indicates you type something and then press the Return or Enter key Do not press the Return or Enter key when an instruction says type Italics Emphasizes a point or denotes new terms at the p...

Page 18: ...re using Getting Started Guide and Release Notes for the version of Nokia IPSO you are using Nokia IPSO Boot Manager Reference Guide which describes how to use the Nokia IPSO boot manager Clustering Configuration Guide for the version of Nokia IPSO you are using Nokia Network Voyager inline help You can find the most up to date version of the Nokia IP390 Security Platform Installation Guide in PDF...

Page 19: ... of the IP390 appliance makes it ideal for installations that need to conserve space As network devices these appliances support a comprehensive suite of IP routing functions and protocols including RIPv1 RIPv2 IGRP OSPF and BGP4 for unicast traffic and DVMRP for multicast traffic This chapter provides an overview of the IP390 appliance and the requirements for using it The following topics are co...

Page 20: ...e following figures show component locations for the Nokia appliance Figure 1 Component Locations Front View Table 3 Specifications for the Platform Feature Nokia IP390 Maximum memory size 2 GB Network interface cards NICs support Two or fewer four port 10 100 Ethernet NICs Two or fewer two port copper Gigabit Ethernet NICs Two or fewer two port fiber optic Gigabit Ethernet NICs 00525 IP390 System...

Page 21: ...ows the layout of the built in Gigabit Ethernet ports and status LEDs Figure 3 Built In Gigabit Ethernet Ports Details Caution Cables that connect to the Gigabit Ethernet ports must be IEEE 802 3 compliant to prevent potential data loss 00527 Power socket Power switch 00547 Activity LED blinking yellow Link LED solid yellow for 10 100 Mbps solid green for 1000 Mbps RJ 45 connectors All manuals and...

Page 22: ...upport Services group can provide support only for Nokia products that use Nokia approved accessories For sales or reseller information contact a Nokia service provider listed in the Nokia Contact Information on page 3 Table 4 PMC Network Interface Card Slots Interface For details see Four port copper 10 100 Ethernet Four Port 10 100 Mbps Ethernet NICs on page 61 Two port copper Gigabit Ethernet 1...

Page 23: ... Table 5 shows the system status LEDs and describes their meaning Table 5 System Status LEDs Status Indicator Meaning Symbol Solid blue Power on Solid yellow Appliance is experiencing an internal voltage problem Blinking yellow Appliance is experiencing a temperature problem Solid red One or more fans are not operating properly Power supply over temperature fault Blinking green System activity ind...

Page 24: ...standard Web browser For information about how to access Network Voyager and the related reference materials see Using Nokia Network Voyager on page 45 The IPSO command line interface CLI an SSHv2 secured interface that enables you to easily configure Nokia IP appliances from the command line Everything that you can accomplish with Network Voyager manage monitor and configure the IP390 appliance y...

Page 25: ...Using Hard Disk Drives for Logging The appliance supports a single hard disk drive which provides 40 GB of disk storage You can use the hard disk drive for storing log files Using a Flash Memory PC Card for Logging The appliance has two PC card slots both of which support 1 GB flash memory PC cards The slots are labeled PCMCIA and are located on the front of the appliance as Figure 5 shows The app...

Page 26: ...pter A Technical Specifications Warning Excessive electromagnetic interference EMI can occur if you use controls make performance adjustments or follow procedures that are not described in this document Warning To reduce the risk of fire electric shock and injury when you use telephone equipment follow basic safety precautions Do not use the product near water Caution Replace the battery only with...

Page 27: ...rating system and applications Nokia operating system software requirements IPSO v4 1 or later Check Point VPN 1 versions compatible with the version of Nokia IPSO you are using For information about updates to the software requirements or additional applications that have become available since this guide was published contact your Nokia service provider as listed in Nokia Contact Information on ...

Page 28: ...ut our environmental programs and practices which includes details about materials used in manufacturing and end of life practices You can also find your product s Eco Declaration which provides basic information on the environmental attributes of the product covering material use packaging disassembly and recycling Contact your local waste management agencies for guidelines specific to your area ...

Page 29: ...opics are covered Before You Begin Rack Mounting the Appliance Connecting Power Connecting to the Console or Auxiliary Port Connecting to Network Interfaces Before You Begin To rack mount the appliance you need Phillips head screwdriver Grounding wrist strap Suitable grounded work surface on which to place the chassis tray assembly All manuals and user guides at all guides com ...

Page 30: ...rovided with the wrist strap before you handle the components or open the appliance Rack Mounting the Appliance The appliance mounts in a standard 19 inch rack with four mounting screws as Figure 6 shows Note To avoid damaging your equipment Nokia recommends that you use all four rack mounting screws when you install your appliance on the rack Figure 6 Mounting Screws Location 00525 IP390 Mounting...

Page 31: ...unting Brackets Caution Blocking ventilation openings during installation may result in damage to the appliance Connecting Power The power plug and power switch for the appiance is located on the back of the appliance as Figure 8 shows 00539 IP3 90 IP3 90 Brackets located for flush with rack installation Brackets located for forward of rack installation All manuals and user guides at all guides co...

Page 32: ...uxiliary Port If you do not use DHCP to perform the initial configuration of your Nokia IP390 appliance you must use a serial console connection RJ 45 null modem cable included For information about using DHCP for initial configurations see Chapter 3 Performing the Initial Configuration After you perform the initial configuration you no longer need the console connection You can use any standard V...

Page 33: ... modem port One RJ 45 termination has a retractable shroud that releases or secures the RJ 45 tab Use this end of the cable when connecting to the console port of the IP390 For cable pin assignments for the console connection see Console Port on page 36 2 Connect the other end of the cable to the VT100 console or to a system running a terminal emulation program The cable that Nokia provides with a...

Page 34: ...the kit see Nokia Contact Information on page 3 Note The cable described in this section is a rollover cable which is required for IP390 console and auxiliary port connections You cannot use standard Ethernet cables for console and auxiliary connections To connect the cable push the connector into the receptacle as you would with other similar cables To disconnect the cable push the cable toward t...

Page 35: ...ector out of the receptacle You can connect the other end of the cable to a DB 9 console connection using the appliance console port and the DB 9 female adaptor or to a DB 25 modem connection using the appliance auxiliary port and the DB 25 male 1 2 2 1 00548a Push cable Pull boot To connect the cable To disconnect the cable All manuals and user guides at all guides com ...

Page 36: ...ault configuration of the serial ports are 9600 baud 8 bits no parity and 1 stop Table 6 provides pin assignment information for console connections If you need to access the devices locally you must use the console port Table 6 Pin Assignments for Console Connector and Cable 00552 DB 9 female adapter DB 25 male adapter Console Port DTE RJ 45 to RJ 45 Rollover Cable RJ 45 to DB 9 Terminal Adapter ...

Page 37: ...sh a modem connection for managing the appliance remotely or out of band The default configuration of the serial ports are 9600 baud 8 bits no parity and 1 stop bit Table 7 provides pin assignment information for modem connections Table 7 Pin Assignments for AUX Connector and Modem Cable GND 5 4 5 GND RxD 6 3 3 TxD DSR 7 2 4 DTR CTS 8 1 7 RTS Console Port DTE RJ 45 to RJ 45 Rollover Cable RJ 45 to...

Page 38: ...h you are not required to do so To connect Ethernet devices Use a straight through RJ 45 cable to connect to a 10 Mbps or 100 Mbps hub Use a crossover RJ 45 cable to connect directly to a host For details see Ethernet NIC Connectors and Cables on page 63 To connect copper Gigabit Ethernet devices Use a straight through or crossover RJ 45 cable to connect to a 10 Mbps 100 Mbps or 1000 Mbps hub or d...

Page 39: ...ices Use a multimode fiber optic cable with an LC connector to connect to a 10 Mbps 100 Mbps or 1000 Mbps hub or directly to a host The destination end of the cable can be either LC or SC depending on the type of connector required for the destination Gigabit Ethernet device You can also use a half duplex LC to LC cable to loop back the transmit port of an interface to the receiver port For detail...

Page 40: ...2 Installing the Nokia IP390 Appliance 40 IP390 105i 105s Security Platform Installation Guide All manuals and user guides at all guides com ...

Page 41: ...the initial configuration information the first time the appliance is started You can perform the initial configuration manually by using a console connection This chapter describes how to perform the initial configuration manually by using a console connection It includes the following sections Using a Console Connection Using Nokia Network Voyager Using the Command Line Interface Using Nokia Hor...

Page 42: ...e configuration process What is the hostname What is the admin password Will you use Nokia Network Voyager for subsequent configuration Which interface will you use What is the assigned IP address and masklength What is the default router What is the interface speed Note The default interface speed for the appliance is 1000 Mbps You can make VLAN SNMP community string and remote logging configurat...

Page 43: ...ray assembly is pushed all the way in from the front of the appliance and that the front panel retaining screws are tightened Make sure that power is turned on to the power strip or wall receptacle you plugged the appliance in to If the fans are still not running or if the power LED does not illuminate contact your Nokia service provider as listed in Nokia Contact Information on page 3 for technic...

Page 44: ...figure the appliance with an incorrect host name and IP address this could happen if a DHCP server on your network is configured to respond to any request To reset the incorrect host name and IP address a Establish a console connection to the appliance b Enter the following rm config active or mv config active config active old c Reboot the appliance d Respond to the Hostname prompt within 30 seco...

Page 45: ...cation or Address field enter the IP address of the initial interface you configured for the appliance You are prompted to enter the admin username and the password you entered when you performed the initial configuration Note If the username login screen does not open you might not have a physical network connection between the host and your appliance or you might have a network routing problem C...

Page 46: ...e is the comprehensive reference source for Nokia Network Voyager To access this source look at the list in the navigation tree on the left side of the window as shown in Figure 9 You can also access the Nokia Network Voyager Reference Guide and other Nokia IPSO documentation at the Nokia support site https support nokia com or on the software CD that was delivered with your appliance Nokia Networ...

Page 47: ...ommand Line Interface You can also use the Nokia IPSO command line interface CLI to manage and configure Nokia IP appliances from the command line Everything that you can accomplish with Network Voyager you can also do with the CLI Link to complete user documentation Link to inline help context sensitive help All manuals and user guides at all guides com ...

Page 48: ...hat is you can view configuration settings but you cannot change them You can now execute CLI commands from the CLI shell and the Nokia IPSO shell The Nokia IPSO shell is what you see when you initially log on to the appliance Execute from To Implement Purpose Nokia IPSO command line Enter the following command to invoke the CLI shell clish The prompt changes and you can then enter CLI commands En...

Page 49: ...rizon Manager an administrator can obtain configuration information upgrade or downgrade the operating system perform application installations and distribute necessary licensing to multiple appliances simultaneously thereby reducing potential human error and improving productivity Using Horizon Manager a network security professional can manage multiple devices simultaneously perform parallel sof...

Page 50: ...3 Performing the Initial Configuration 50 IP390 105i 105s Security Platform Installation Guide All manuals and user guides at all guides com ...

Page 51: ...e covered Deactivating Configured Interfaces Removing Installing and Replacing NICs Configuring and Activating Interfaces Monitoring Network Interface Cards For detailed information on specific NICs see Chapter 5 Connecting PMC Network Interface Cards Caution You should have a working knowledge of networking equipment before attempting to service an IP390 appliance Limit service of the unit to the...

Page 52: ...erfaces on the NIC If you do not deactivate the interfaces before removing the NIC you may have to reinstall the NIC to deactivate its logical and physical interfaces in Network Voyager For information about how to access Network Voyager see Using Nokia Network Voyager on page 45 Removing Installing and Replacing NICs Note Before removing a configured NIC with these instructions you must deactivat...

Page 53: ...ted when the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be completed with the chassis tray assembly fully removed from the appliance Power is still active in the chassis body and care should be taken when working on the power supply or power supply wiring without disconnecting the power cord 1 Use Net...

Page 54: ... or a screwdriver to loosen the retaining screws that hold the chassis tray assembly 3 Gently pull the chassis tray assembly forward to expose the NIC connectors Remove the tray completely to avoid damaging components 00525 IP390 Chassis tray assembly retaining screws 00537 IP390 All manuals and user guides at all guides com ...

Page 55: ... bezel retaining screws If you are installing a NIC in an unoccupied slot remove the blank bezel that occupies the space in the appliance front panel retain it for future use and proceed to step 7 5 From above the chassis tray assembly remove the NIC retaining screws from the back of the NIC 00529 00530 All manuals and user guides at all guides com ...

Page 56: ...hout installing another NIC a Insert a blank bezel into the front panel slot formerly occupied by the NIC and push it gently into place Make sure that the bezel is completely seated into the front panel and that the screw holes on the bottom of the bezel align with those in the front panel Note To reduce electromagnetic interference EMI a blank bezel needs to be installed in the place of any NIC y...

Page 57: ...ezel into the front panel b Gently push the back of the NIC down toward the chassis tray assembly Make sure that the NIC edge is completely seated into the connectors on the chassis tray assembly 8 From the top of the chassis tray assembly screw the NIC retaining screws into the standoffs on the back of the NIC 00532 00531 All manuals and user guides at all guides com ...

Page 58: ...From beneath the chassis tray assembly screw in the bezel retaining screws 10 Slide the chassis tray assembly back into the appliance until it clicks into place The appliance automatically restarts when the chassis tray assembly clicks into place 00528 00538 IP390 All manuals and user guides at all guides com ...

Page 59: ...ng Network Interface Cards You can asses the general operating condition of the NICs in your appliance by looking at the LED status indicators on the NICs The status indicators for each NIC are explained in the NIC reference chapter For status indicator information for the built in Gigabit Ethernet ports see Built In Gigabit Ethernet Ports on page 21 For status indicator information for the four p...

Page 60: ...abit Ethernet NIC see Two Port Fiber Optic Gigabit Ethernet Network Interface Card on page 68 Use Network Voyager to access detailed port information For information about accessing Network Voyager see Using Nokia Network Voyager on page 45 You can also use the Nokia IPSO tcpdump command to examine the track on a specific port All manuals and user guides at all guides com ...

Page 61: ...wo Port Fiber Optic Gigabit Ethernet Network Interface Card For instructions on adding or replacing interface cards see Chapter 4 Installing and Replacing Network Interface Cards Caution Protect your appliance and other electronic equipment from electrostatic discharge ESD damage by making sure you are properly grounded before you touch any electronic component Four Port 10 100 Mbps Ethernet NICs ...

Page 62: ...tracing for analysis through tcpdump Compliance with IEEE 802 3 Ethernet specification You can configure and monitor Ethernet interfaces with Network Voyager Specifically you set the port speed and full duplex or half duplex mode by using Network Voyager Figure 10 Four Port Ethernet NIC Front Panel Details After the power is turned on the Ethernet link LEDs on the appliance and on the remote equip...

Page 63: ... IEEE 802 3 10BASE T 100BASE TX unshielded twisted pair full duplex or half duplex cable Caution Cables that connect to the Ethernet card must be IEEE 802 3 compliant to prevent potential data loss You can order appropriate adapter cables separately You can order additional cables from a cable vendor of your choice Figure 11 shows the pin assignments for the cable The RJ 45 cable output connector ...

Page 64: ...he pin assignments for the RJ 45 cross over cable Figure 12 Ethernet Crossover Cable Pin Connections You can also use cables intended for Gigabit Ethernet NIC connections for your Ethernet NIC connections as shown in Figure 13 Pin Assignment 1 TX 2 TX 3 RX 4 5 6 RX 7 8 00270 8 1 00017 1 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 All manuals and user guides at all guides com ...

Page 65: ...ots or subslots in an appliance that other I O cards do not occupy Note Copper Gigabit Ethernet NICs you use in appliances need to be the Version 2 type as indicated on the right end of the NIC faceplate These NICs are sold by Nokia under the order code NIF4425 Copper Gigabit Ethernet NIC Features The copper Gigabit Ethernet NIC supports the following features Supports traffic at 10 100 and 1000 M...

Page 66: ...nnect to a 1 Gbps hub switch or router use a straight through RJ 45 cable Cat 5 type cable or as required by your network configuration Note All Nokia copper Gigabit Ethernet NICs support cable auto sensing You can use a straight through or crossover cable to connect the NIC to a Gigabit Ethernet hub or switch or to connect directly to a host In Figure 15 the RJ 45 cable output connector is number...

Page 67: ...signments To connect directly to a host use an RJ 45 crossover cable wired as Figure 16 shows Figure 16 Gigabit Ethernet Crossover Cable Pin Connections 00270 Pin Gigabit Ethernet Assignment 10 100 Mbps Assignment 1 BI_DA TX 2 BI_DA TX 3 BI_DB RX 4 BI_DC 5 BI_DC 6 BI_DB RX 7 BI_DD 8 BI_DD 8 1 00020 1 2 3 4 5 6 7 8 1 2 3 4 5 6 7 8 All manuals and user guides at all guides com ...

Page 68: ...IC Features The two port fiber optic Gigabit Ethernet NIC provides the following features Supports traffic at 1000 Mbps High bandwidth Full duplex mode operation up to 1 Gbps no half duplex support Link speed auto advertising Packet tracing for analysis through tcpdump Compliance with IEEE 802 3z Gigabit Ethernet specification You can configure and monitor Ethernet interfaces with Nokia Network Vo...

Page 69: ...or for each NIC interface The destination end of the cable can be either LC or SC depending on the type of connector required for the destination Gigabit Ethernet device You can also use a half duplex LC to LC cable to loop back the transmit port of an interface to the receiver port Two LC to SC cables are included with two port fiber optic Gigabit Ethernet NICs You can order additional cables fro...

Page 70: ...5 Connecting PMC Network Interface Cards 70 IP390 105i 105s Security Platform Installation Guide All manuals and user guides at all guides com ...

Page 71: ... Flash Memory PC Card Installing or Replacing a Hard Disk Drive Configuring a PC Card or Hard Disk Drive for Logging Replacing or Upgrading Memory For instructions on adding or replacing interface cards see Chapter 4 Installing and Replacing Network Interface Cards Caution You should have a working knowledge of networking equipment before attempting to service an IP390 appliance Limit service of t...

Page 72: ... Memory Card The compact flash memory card stores the Nokia IPSO operating system and the boot manager program Use the internal compact flash memory to boot the system and install the Nokia IPSO operating system on the compact flash memory card The compact flash memory card is located on the motherboard in a slot behind the hard disk drive or hard disk drive connector if no drive is installed Figu...

Page 73: ...these components Use a grounding wrist strap and follow the instructions provided with the wrist strap before you handle the components or open the appliance If you do not have a grounding wrist strap make sure you are properly grounded before you touch any electronic component You must perform an orderly shutdown of the appliance and turn the power off whenever you remove the chassis tray assembl...

Page 74: ...n the power supply or power supply wiring without disconnecting the power cord Caution You risk damage to the appliance or loss of data if you do not use the following procedure when you replace the compact flash memory 1 Use Network Voyager or the CLI to halt the appliance To use Network Voyager to shut the appliance down select System Configuration Reboot or Shutdown Halt To use the CLI to shut ...

Page 75: ...te and remove the existing compact flash memory card from the slot by gently sliding it out of the slot 7 Gently insert the new compact flash memory card into the slot 8 Slide the chassis tray assembly back into the appliance until it clicks into place The appliance automatically restarts when the chassis tray assembly clicks into place 9 Resecure the two chassis tray assembly retaining screws 005...

Page 76: ...liance Access to the appliance by using Nokia Network Voyager or the command line interface CLI Compact flash memory PC card and accompanying documentation Caution To avoid potential equipment malfunction Nokia recommends that you obtain flash memory PC cards only from Nokia or authorized resellers For further information contact the appropriate Nokia customer support site listed in Nokia Contact ...

Page 77: ...t the flash memory PC card when you insert it in the PC card slot and you must unmount the flash memory PC card before you remove it You do not need to reboot or shut down the system if you manually mount and unmount the flash memory PC card To transfer Nokia IPSO images or configuration files to the flash memory PC card 1 Insert the flash memory PC card into the appliance 2 Connect to the applian...

Page 78: ...owly push the eject button located to the left of the card Hold the flash memory PC card while you push the eject button to prevent the card from ejecting too quickly Installing or Replacing a Hard Disk Drive You can add a single hard disk drive to your appliance The following figure shows the location of the hard disk drive on the motherboard Note Back up your files to a remote system on a regula...

Page 79: ...t To install the hard disk drive in your appliance you need the following Physical access to the appliance A Nokia approved hard disk drive Access to the appliance through Network Voyager A Phillips head screwdriver A torque screwdriver capable of a 69 4ozf in 5kgf cm setting 00542 IP390 Hard disk drive All manuals and user guides at all guides com ...

Page 80: ...tray assembly forward to remove the tray from the appliance so you can access the hard disk drive retaining screws from the bottom of the tray Note Because power to an IP390 appliance is automatically disconnected when the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be completed with the chassis tray a...

Page 81: ...wer supply wiring without disconnecting the power cord 4 If a you are replacing a hard disk drive remove the retaining screws that hold the hard disk drive unit from the bottom of the chassis tray assembly Gently remove the hard disk drive from the motherboard taking care not to damage the connector 00534 All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 82: ...05i 105s Security Platform Installation Guide 5 Insert the hard disk drive unit Note Push the hard disk drive gently into place Take care to align the connectors correctly as the connectors are not keyed 00536 All manuals and user guides at all guides com ...

Page 83: ...ghten the retaining screws that holds the hard disk drive into place 7 Slide the chassis tray assembly back into the appliance until it clicks into place The appliance automatically restarts when the chassis tray assembly clicks into place 00535 00538 IP390 All manuals and user guides at all guides com ...

Page 84: ...e and the CLI Reference Guide for Nokia IPSO contain instructions for configuring a Nokia appliance to store Nokia IPSO log messages on the disk This section explains how to configure an optional disk and configure it to store Check Point log messages on an IP390 Note Nokia recommends that you do not save Check Point log files on a flash memory PC card If possible use a hard disk drive for this pu...

Page 85: ...nd is fully inserted into the slot 5 Select the device in the Choose column 6 Click Apply 7 Wait until you see a message indicating that you should reboot the appliance There is a short delay possibly a few minutes before the message appears The delay is longer with devices of larger capacity 8 When the message appears click Reboot Shutdown System 9 Reboot the appliance 10 When the appliance has r...

Page 86: ...ory module DIMM sockets This section explains how to upgrade or replace the memory for either appliance by using a Nokia approved memory upgrade kit The IP390 comes with different memory configurations Contact Nokia customer support for more information on the supported memory configurations Note Nokia recommends that you obtain memory kits only from Nokia or authorized resellers For further infor...

Page 87: ... need the following Physical access to the appliance Nokia memory upgrade kit and accompanying documentation Network or console access to the appliance Caution To protect the appliance and the memory modules from electrostatic discharge ESD make sure you are properly grounded before you touch these components 00546 IP390 DIMMs and DIMM sockets All manuals and user guides at all guides com ...

Page 88: ...pose the DIMM sockets Remove the tray completely to avoid damaging components Note Because power to an appliance is automatically disconnected when the chassis tray assembly is opened you do not need to manually disconnect the power for this procedure Any servicing of the unit however should be completed with the chassis tray assembly fully removed from the appliance Power is still active in the c...

Page 89: ... outward and carefully pulling each DIMM upward as the following figure shows You might need to pull opposite ends of the DIMM alternately to gradually free it from the contact pins 5 The memory DIMMs are keyed to prevent improper insertion Press the new DIMM into the socket until it clicks into place 00545 IP390 All manuals and user guides at all guides com ...

Page 90: ...smooth The bottom edge has three different length sets of contacts which mate with the slots on the socket Be sure the contacts and slots are properly aligned before you insert the DIMM The retaining clips move into the lock position as you press the DIMM into place 00544 IP390 All manuals and user guides at all guides com ...

Page 91: ...into place 7 Resecure the two retaining screws The appliance automatically recognizes the new memory configuration You can verify this from the Network Voyager the CLI or the IPSO shell To verify the memory from the CLI enter show asset hardware To verify the memory from the IPSO shell enter dmesg grep real memory 00538 IP390 00525 IP390 Chassis tray assembly retaining screws All manuals and user ...

Page 92: ...6 Installing and Replacing Other Components 92 IP390 105i 105s Security Platform Installation Guide All manuals and user guides at all guides com ...

Page 93: ...page 103 Unable to Log in to the Console Port No Error Message Two laptop computers using terminal emulation programs or terminals should be able to communicate back to back in the same way that the terminal communicates with the appliance If this is not possible using your laptop computer or terminal the problem is with the terminal or cable and not the appliance Problem You do not have a console...

Page 94: ...e terminal should be set for no flow control Problem Defective the appliance or file system Solution Contact the Nokia customer support site listed in Nokia Contact Information on page 3 Problem Database is corrupt Solution Return to default settings according to the instructions included in the instructions for resetting the default password or contact the Nokia customer support site listed in No...

Page 95: ...boots up the following text appears Enter pathname of shell or RETURN for sh Press Enter 3 Type etc overpw at the prompt When the response asks if you want to continue type y 4 The admin password defaults to no password for admin Continue to boot to multiuser mode 5 Reconfigure the password as you normally would Note Blank passwords are not accepted in Network Voyager In such cases enter the follo...

Page 96: ...actory default configuration 3 Create the new default configuration Do Not Get a Login Prompt Error Messages Appear Problem The appliance is defective or the file system on the appliance is defective Solution Contact the Nokia customer support site listed in Nokia Contact Information on page 3 Note Use the full installation procedure to install a new system The new system completely replaces the c...

Page 97: ... to verify the interface configuration and fix it if necessary Problem Host port configuration is incorrect Solution Use the CLI over the console connection to verify the interface configuration and fix it if necessary Problem Wrong link speed Solution Use the CLI over the console connection to verify the interface configuration and fix it if necessary Do Not See Interfaces that Should be Present ...

Page 98: ...page in Network Voyager that the interface port is configured as active Problem High collision rate on the hub Solution Disconnect connections one at a time until the problem is localized to one computer and troubleshoot further Unable to Ping Through Appliance No Connectivity Between Ports This section covers connectivity issues that are isolated within an IP390 appliance or network Localize the ...

Page 99: ...the local interface is the default route for that computer Problem The ARP table has old information Solution If the ARP table has an old or invalid entry for the device associated with the IP address you are attempting to ping use Network Voyager to delete the invalid entry For information about how to access Network Voyager and the related reference materials see Using Nokia Network Voyager on p...

Page 100: ...rious hosts on each network Problem DVMRP is not enabled on the interfaces Solution Verify that DVMRP is enabled on the interfaces in use Problem Exceeding TTL on clients Solution Verify that the client is set up for the proper TTL number Many clients are set to receive local traffic only one hop away Problems Interfacing to 1483 Devices Problem Remote and local devices are not configured for the ...

Page 101: ...rger MTU sizes Appliance Not Receiving Power Problem Power cord is not properly plugged in Solution Check cord Make sure it is properly seated at both ends Problem Power supply not providing power Solution Check power source If there is no power at the source take appropriate action such as inserting a new fuse or resetting circuit breaker Appliance Does Not Recognize New Memory Configuration Prob...

Page 102: ...command at the boot manager prompt as shown in this example Loading boot manager BOOTMGR 0 printenv Bootmgr Revision 3 3 base kernel 3 5 1 fcs1 02 12 2001 102644 autoboot NO bootwait 5 boot file boot flags boot device No referenced boot file or boot device appears Setting the boot manager to defaults causes the boot manager to determine that no environment variables are set and it responds by impo...

Page 103: ...g Routing Problems Several useful tools are available to troubleshoot routing problems The first tool is available from the Monitor page in Network Voyager from which you display routing statistics and errors You can access this information from the command line interface using the ICLID IPSRD command line interface daemon command An example use of the ICLID command is shown below For information ...

Page 104: ... igrp ospf static all direct inactive rip summary hostname IP address show route ospf Codes C connected S static I IGRP R RIP B BGP O OSPF E OSPF external A Aggregate K Kernel Remnant H Hidden S Suppressed The response to the preceding ICLID command is as follows 0 172 16 16 via 10 1 1 225 eith sp4p1c0 cost 3 age 3111 In addition several trace options are available You can enable these options und...

Page 105: ...onfiguring OSPF from the Configuring Routing document page in Network Voyager You can access the document page by pressing Doc Problem OSPF hello and dead timers are not the same on each interface for a given link Solution Verify that the settings at the end of each link are identical Problem Attached devices do not support OSPF Solution Ensure that the attached the appliance supports OSPF If the ...

Page 106: ... 1 must use consistent subnet masks change to RIP version 2 or OSPF to use inconsistent subnet masks Problem Number of networks exceeds the RIP limit Solution RIP can span up to 16 networks Verify that your network topology does not exceed this limit Common Problems Exchanging Routes Always enter a metric value if you are exporting routes from OSPF to RIP Problem Exchanging routes are not configur...

Page 107: ...tallation Guide 107 Problem Routing protocol is not functioning properly Solution to ensure that each routing protocol is functioning properly see Common Problems with OSPF on page 104 and Common Problems with RIP on page 105 All manuals and user guides at all guides com ...

Page 108: ...7 Troubleshooting 108 IP390 105i 105s Security Platform Installation Guide All manuals and user guides at all guides com ...

Page 109: ...lowing space in a rack 1 75 inches 4 45 centimeters of vertical space 18 inches 46 centimeters behind the front panel of the rack 6 inches 15 centimeters behind the IP390 appliance to allow the back exit fan to move air through the appliances Dimensions Height 1 75 in 4 45 cm Width 17 in 44 cm 19 in 48 cm rack mountable Depth 16 12 in 40 94 cm Weight 17 lbs 7 7 kg base system All manuals and user ...

Page 110: ...32 F to 113 F NIC Interfaces NIC Type Cable Type Cable Output Connector Four port Ethernet IEEE 802 3 10BASE T 100BASE T 1000BASE T unshielded twisted pair full duplex or half duplex RJ 45 Two port fiber optic Gigabit Ethernet IEEE 802 32 Gigabit Ethernet multi mode Fiber LC Two port copper Gigabit Ethernet Straight through RJ 45 cable Cat 5 type or crossover cable in some cases shielded Cat 5 Eth...

Page 111: ...mpliance Statements FCC Notice US Declaration of Conformity According to ISO IEC Guide 22 and EN 45014 declares that the product Manufacturer s Name Nokia Inc Manufacturer s Address 313 Fairchild Drive Mountain View CA 94043 2215 USA Product Name IP390 105i 105s Model Number EM7500 Product Options All All manuals and user guides at all guides com a l l g u i d e s c o m ...

Page 112: ... 93 68 EEC Serial Number 1 to 100 000 Date First Applied 2006 Safety EN60950 1 2001 A11 IEC60950 1 2001 UL60950 Third Edition 2000 CAN CSA C22 2 No 60950 2000 EMC EN55024 1998 EN55022A 1998 EN61000 3 2 EN61000 3 3 Christopher Saleem Compliance Reliability Engineering Manager Security Mobile Connectivity Enterprise Solutions Mountain View California April 2006 Elie Habib Senior Vice President Secur...

Page 113: ... and Voltage Fluctuation Safety Standards FCC Part 15 Subpart B Class A US Canada EN55022 CISPR 22 Class A European Community CE EN55024 European Community CE EN61000 4 2 EN61000 4 3 EN61000 4 4 EN61000 4 5 EN61000 4 6 EN61000 4 11 EN61000 3 2 European Community CE EN61000 3 3 European Community CE UL60950 EN60950 US European Community CE CAN CSA C22 2 No 60950 Canada All manuals and user guides a...

Page 114: ...er there is no guarantee that interference will not occur in a particular installation If this device does cause harmful interference to radio or television reception the user is encouraged to try to correct the interference by one or more of the following measures Reorient or relocate the receiving antenna Increase the separation between the computer and receiver Connect the computer into an outl...

Page 115: ... declaration of conformity 111 FCC notice 114 compliance statements 113 component locations 20 connections auxiliary port 33 console port 33 Ethernet NICs 63 Gigabit Ethernet NICs copper 66 Gigabit Ethernet NICs fiber optic 69 modem 37 power 31 connector pin assignments auxiliary connection 37 console connection 36 Ethernet crossover cable 64 Ethernet NICs 64 Gigabit Ethernet crossover cable 67 Gi...

Page 116: ...orts built in 21 H hard disk drive installing a 78 storing logs on 25 height specification 109 I ICLID command troubleshooting with the 103 installing hard disk drive a 78 NICs 52 IP routing 19 L LEDs Ethernet NIC 62 Gigabit Ethernet NICs copper 66 Gigabit Ethernet NICs fiber optic 69 system status 23 logging flash memory PC card 25 hard disk drives 25 M memory PC card 25 memory RAM replacing 86 u...

Page 117: ...ng retired equipment 27 replacing compact flash memory card the 72 replacing RAM memory 86 RJ 45 connector console cables for 36 crossover cables for 64 Ethernet cables for 63 S serial port 37 space requirements 109 specification depth 109 height 109 operating temperature 110 physical dimensions 109 space requirements 109 weight 109 width 109 specifications network interfaces 110 technical 109 sys...

Page 118: ...Index 118 IP390 105i 105s Security Platform Installation Guide V ventilation requirements 26 W weight specification 109 width specification 109 All manuals and user guides at all guides com ...