Nokia IP530

IP Security Network

 Firewall

 

 

Zabezpieczenia sieciowe od Nokii

Nokia wprowadza na polski rynek platformę IP530 Network Security, wysoce wydajne urządzenie do ochrony sieci średnich i dużych firm. Urządzenie ściśle współpracuje z oprogramowaniem VPN-1/FireWall-1 firmy Check Point Software Technologies. Zaprojektowano ją z myślą o zapewnieniu firmom bezpiecznego rozwoju i działania ich sieci.

Nokia IP530 należy do kolejnej generacji tego typu platform, charakteryzujących się większą funkcjonalnością, prędkością działania oraz dużym stopniem bezpieczeństwa przesyłu danych. Platforma ta oferuje firewall do ochrony danych przy przesyłach sięgających 500 megabitów na sekundę (Mbps), co jest efektem zastosowania podwójnej szyny. Ponadto nowy produkt Nokii standardowo posiada cztery zintegrowane porty Ethernet 10/100, dwa sloty PCMCIA typu II przeznaczone do współpracy z modemem oraz trzy sloty na karty interfejsu sieciowego CPCI. Ponadto wyposażona jest w wewnętrzny slot dla akceleratora sprzętowego VPN.

Nowa platforma Nokii została zaprojektowana dla firm, które potrzebują jak największych przepustowości, przy zachowaniu odpowiednio wysokiego poziomu bezpieczeństwa. Jak każdy produkt tej rodziny, Nokia IP530 jest wstępnie konfigurowana i testowana tak, by mogła zostać jak najszybciej zainstalowana. Ponadto jest ona kompatybilna ze wszystkimi protokołami routingu IP oraz jest objęta globalnym, najwyższej klasy serwisem „First Call – Final Resolution”.

CONSOLE LOG:

Insyde Software BIOS Version 28.02.05
Copyright 1983 - 2001 Insyde Software Corp. All Rights Reserved
ÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ
CAESAR-1 Build Version 2.00.31
Build at 09:28:27 05/22/02
Base Memory[zasłonięte]00006 Kb
Extended Memory[zasłonięte]02611 Kb
Total Memory[zasłonięte]02621 Kb
Auto Detecting IDE Devices[Done]

Press F2 to enter System Configuration Utility

Configuring: [Bridge Controller ]


700 Mhz Pentium III /E CPU
External Cache: 256K installed
- | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | / - | Starting bootmgr
Loading boot manager..
Boot manager loaded.
Entering autoboot mode.
Type any character to enter command mode.
Booting /dev/wd0f:/image/IPSO-3.8-BUILD039-07.23.2004-[zasłonięte][zasłonięte]500-14/kernel
[kernel] symtab 90[zasłonięte]000, sym_start 90[zasłonięte]004, sym_end 907795c8
[kernel] sym_size 5c7b, str_size 663a0
[ preserving 0xab968 bytes of kernel symbol table ]
Copyright (c) 1982, 1986, 1989, 1991, 1993
The Regents of the University of California. All rights reserved.

Resizing packet buffers: mbufs 15360 clusters 14000
releng 1404 07.23.2004-[zasłonięte]500
CPU: 721-MHz Pentium-III w ATC (686-class CPU)
real memory = 268[zasłonięte]456 (256M bytes)
avail memory = 250[zasłonięte]696 (239M bytes)
chip0 rev 3 on pci0:0:0
piix0 rev 2 on pci0:7:0
piix1 rev 1 on pci0:7:1
Probing for devices on the ISA bus:
sio0 at 0x3f8-0x3ff irq 4 on isa
<5>sio0: type 16550A
sio1 at 0x2f8-0x2ff irq 3 on isa
<5>sio1: type 16550A
wdc0 at 0x1f0-0x1f7 irq 14 on isa
wdc0: unit 0 (wd0): , LBA
wd0: 32MB (62592 sectors), LBA geometry: 62 cyls, 16 heads, 63 S/T
wd0: Physical geometry: 489 cyls, 4 heads, 32 S/T
wdc0: unit 1 (wd1): , LBA, DMA, SMART
wd1: 40020MB (78[zasłonięte]360 sectors), LBA geometry: 4865 cyls, 255 heads, 63 S/T
wd1: Physical geometry: 16383 cyls, 16 heads, 63 S/T
npx0 on motherboard
npx0: INT 16 interface
superio0 at 0x0 on isa
piix2 rev 1 on pci0:7:2
piix3 rev 2 on pci0:7:3
Motherboard revision code = 1, VID4 inversion = 0
LM87 environmental monitor rev 6, chip 0
tulip0 rev 65 int a irq 11 onboard 1
netlog:eth1 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:ac
netlog:eth1 .. enabling 10baseT/UTP port in half duplex mode
tulip1 rev 65 int a irq 12 onboard 2
netlog:eth2 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:ad
netlog:eth2 .. enabling 10baseT/UTP port in half duplex mode
chip1 rev 3 on pci0:1:0
pcidec0 rev 6 on pci1:0:0
tulip2 rev 65 int a irq 6 onboard 3
netlog:eth3 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:ae
netlog:eth3 .. enabling 10baseT/UTP port in half duplex mode
tulip3 rev 65 int a irq 10 onboard 4
netlog:eth4 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:af
netlog:eth4 .. enabling 10baseT/UTP port in half duplex mode
pcidec1 rev 0 slot 1
tulip4 rev 65 int a irq 10 slot 1 port 1
netlog:eth-s1p1 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:a0
netlog:eth-s1p1 .. enabling 10baseT/UTP port in half duplex mode
tulip5 rev 65 int b irq 11 slot 1 port 2
netlog:eth-s1p2 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:a1
netlog:eth-s1p2 .. enabling 10baseT/UTP port in half duplex mode
tulip6 rev 65 int c irq 12 slot 1 port 3
netlog:eth-s1p3 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:a2
netlog:eth-s1p3 .. enabling 10baseT/UTP port in half duplex mode
tulip7 rev 65 int d irq 6 slot 1 port 4
netlog:eth-s1p4 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:a3
netlog:eth-s1p4 .. enabling 10baseT/UTP port in half duplex mode
pcidec2 rev 0 slot 2
tulip8 rev 65 int a irq 6 slot 2 port 1
netlog:eth-s2p1 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:a4
netlog:eth-s2p1 .. enabling 10baseT/UTP port in half duplex mode
tulip9 rev 65 int b irq 10 slot 2 port 2
netlog:eth-s2p2 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:a5
netlog:eth-s2p2 .. enabling 10baseT/UTP port in half duplex mode
tulip10 rev 65 int c irq 11 slot 2 port 3
netlog:eth-s2p3 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:a6
netlog:eth-s2p3 .. enabling 10baseT/UTP port in half duplex mode
tulip11 rev 65 int d irq 12 slot 2 port 4
netlog:eth-s2p4 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:a7
netlog:eth-s2p4 .. enabling 10baseT/UTP port in half duplex mode
pcidec3 rev 0 slot 3
tulip12 rev 65 int a irq 11 slot 3 port 1
netlog:eth-s3p1 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:a8
netlog:eth-s3p1 .. enabling 10baseT/UTP port in half duplex mode
tulip13 rev 65 int b irq 12 slot 3 port 2
netlog:eth-s3p2 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:a9
netlog:eth-s3p2 .. enabling 10baseT/UTP port in half duplex mode
tulip14 rev 65 int c irq 6 slot 3 port 3
netlog:eth-s3p3 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:aa
netlog:eth-s3p3 .. enabling 10baseT/UTP port in half duplex mode
tulip15 rev 65 int d irq 10 slot 3 port 4
netlog:eth-s3p4 .. Generic 2114x DC21143 pass 4.1 -- 00:a0:8e:36:6e:ab
netlog:eth-s3p4 .. enabling 10baseT/UTP port in half duplex mode
pcic0 rev 1 int a irq 6 on pci0:15:0
pcmcia0: TI PCI-1225 (5 mem & 2 I/O windows)
pcic1 rev 1 int a irq 6 on pci0:15:1
changing root device to wd0f

RTC: 00/00/00 00:45:40, A=26, B=42, C=00
swapon: adding /dev/wd0b as swap device
Automatic reboot in progress...
/dev/rwd0f: clean, 433113 free (1545 frags, 53946 blocks, 0.3% fragmentation)
/dev/rwd0a: CLEAN FLAG NOT SET IN SUPERBLOCK (FIXED)
/dev/rwd0a: 4 files, 62 used, 38131 free (19 frags, 4764 blocks, 0.0% fragmentation)

/dev/rwd0d: CLEAN FLAG NOT SET IN SUPERBLOCK (FIXED)
/dev/rwd0d: 3596 files, 238263 used, 29[zasłonięte]226 free (570 frags,[zasłonięte]36414 blocks, 0.0% fragmentation)
/dev/rwd0e: CLEAN FLAG NOT SET IN SUPERBLOCK (FIXED)
/dev/rwd0e: 1952 files, 234777 used,[zasłonięte]47598 free (1940 frags, 594736 blocks, 0.0% fragmentation)
Dec 31 01:47:01 xpand[39]: xpand will perform upgrade if necessary

clearing /tmp
checking for core dump...savecore: no core dump
recording kernel -c changes
starting system daemons: syslogd done.
Dec 31 01:47:02 s178fw01 [LOG_NOTICE] kernel: sio0: type 16550A
Dec 31 01:47:02 s178fw01 [LOG_NOTICE] kernel: sio1: type 16550A
ifmnetlog:eth-s1p3 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s1p3 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s2p4 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s2p4 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s3p1 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s3p1 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s3p2 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s3p2 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s2p1 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s2p1 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s1p1 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s1p1 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s1p4 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s1p4 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s2p2 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s2p2 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s3p4 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s3p4 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s1p2 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s1p2 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s2p3 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s2p3 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth4 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth2 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth3 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s3p3 .. enabling 100baseTX/UTP port in half duplex mode
netlog:eth-s3p3 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth1 .. enabling 100baseTX/UTP port in full duplex mode
done.
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p3 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p3 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p4 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p4 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s3p1 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s3p1 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s3p2 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s3p2 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p1 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p1 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p1 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p1 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p4 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p4 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p2 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:06 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p2 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:07 s178fw01 [LOG_INFO] kernel: netlog:eth-s3p4 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:07 s178fw01 [LOG_INFO] kernel: netlog:eth-s3p4 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:07 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p2 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:07 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p2 .. enfabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:07 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p3 .. enabling 100baseTX/UTP port in hawlf duplex mode
Dec 31 01:47:07 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p3 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:07 s178fw01 [LOG_INFO] kernel: netlog:eth4 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:07 sd178fw01 [LOG_INFO] kernel: netlog:eth2 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:07 s178fw01 [LOG_INFO] rkernel: netlog:eth3 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:07 s178fw01 [LOG_INFO] kernel: netlog:eth-is3p3 .. enabling 100baseTX/UTP port in half duplex mode
Dec 31 01:47:07 s178fw01 [LOG_INFO] kernel: netlog:eth-s3p3 .. enablinvg 100baseTX/UTP port in full duplex modeer loadable interface called.
[FW-1 drv NG] symtab 9654f780, sym_start 9654f784, sym_end 965ada44
[FW-1 drv NG] sym_size 7d90, str_size 8ced4
[ preserving 0xeb198 bytes of FW-1 drv NG symbol table ]

Dec 31 01:47:09 s178fw01 [LOG_INFO] kernel: netlog:eth1 .. enabling 100baseTX/UTP port in full duplex mode
FW-1: 16 interfaces installed
Generating config files for s178fw01: linkaggregation ipsrd hosts password group resolver snmp inetd ttys tz ntp ssmtp skey arp ndp aggrclass acl ddr dhcp ef syslog autosupport httpd lynx modem cron archive ipsec fmd AAA cluster Dec 31 01:47:11 s178fw01 [LOG_ERR] cluster_xlate: Unable to determine interface for network 53.41.0.200/29
xmode mirror [1] 177
ssh [1] + Done dm_xlate dm /var/etc/mirror.conf
iptune miscsec done.
Fri Dec 31 01:47:14 CET 1999
netlog:eth-s1p3 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s2p4 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s3p1 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s3p2 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s2p1 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s1p1 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s1p4 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s2p2 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s3p4 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s1p2 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s2p3 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth4 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth2 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth3 .. enabling 100baseTX/UTP port in full duplex mode
netlog:eth-s3p3 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:15 Dec 31 01:47:18 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p3 .. enabling 100baseTX/UTP port in full duplex mode
nDec 31 01:47:18 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p4 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:18e s178fw01 [LOG_INFO] kernel: netlog:eth-s3p1 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:18 s178fw01 [LOG_tINFO] kernel: netlog:eth-s3p2 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:18 s178fw01 [LOG_INFO] kernel: nletlog:eth-s2p1 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:18 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p1 o.. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:18 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p4 .. enabling 100gbaseTX/UTP port in full duplex mode
Dec 31 01:47:18 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p2 .. enabling 100baseTX/UTP port: in full duplex mode
Dec 31 01:47:18 s178fw01 [LOG_INFO] kernel: netlog:eth-s3p4 .. enabling 100baseTX/UTP port in full duplexe mode
th1 .. enabling 100baseTX/UTP port in full duplex mode

IPSO (s178fw01) (ttyd0)

login: Dec 31 01:47:18 s178fw01 [LOG_INFO] kernel: netlog:eth-s1p2 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:19 s178fw01 [LOG_INFO] kernel: netlog:eth-s2p3 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:19 s178fw01 [LOG_INFO] kernel: netlog:eth4 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:19 s178fw01 [LOG_INFO] kernel: netlog:eth2 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:19 s178fw01 [LOG_INFO] kernel: netlog:eth3 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:19 s178fw01 [LOG_INFO] kernel: netlog:eth-s3p3 .. enabling 100baseTX/UTP port in full duplex mode
Dec 31 01:47:19 s178fw01 [LOG_INFO] kernel: netlog:eth1 .. enabling 100baseTX/UTP port in full duplex mode
CPHA : Getting into preconfigured mode...
FW-1: successfully connected to Nokia Clustering
vpn1 driver loadable interface called.
[VPN-1 NG] symtab 973e7db8, sym_start 973e7dbc, sym_end [zasłonięte]97434c
[VPN-1 NG] sym_size 65bc, str_size 71434
[ preserving 0xbd908 bytes of VPN-1 NG symbol table ]
VPN-1: Cryptographic algorithm tests passed successfully
VPN-1: connected to FW-1


IPSO (s178fw01) (ttyd0)

login: FW-1: Warning: The eth-s2p1c0 interface is not protected by the anti-spoofing feature.
Your network may be at risk. In the future, it is recommended that you
define anti-spoofing protection before installing the Security Policy.
FW-1: Warning: The eth-s2p3c0 interface is not protected by the anti-spoofing feature.
Your network may be at risk. In the future, it is recommended that you
define anti-spoofing protection before installing the Security Policy.


IPSO (s178fw01) (ttyd0)

login: admin
Password:
Dec 31 01:48:22 s178fw01 [LOG_NOTICE] login: authentication failure; root(uid=0) -> admin for login service
Login admin
hasło adminip