Friday, October 24, 2008

IPSO Installation on Nokia Firewall and CheckPoint Installation on Nokia Firewall

My First experience on Nokia Firewall :-). I wanted this to be documented, may useful for others too. Let me know if you have any feedback.

Installing IPSO on Nokia IP330 through FTP

Pre-Install

Connect IP330 with your machine through console cable on COM port.
Connect Nokia IP330 with your machine through cross over cable (or make both the machine in same network and provide concern gateway)

Create a Hyper Terminal

Provide a name for a connection and select Icon and click OK

Select COM Port on which the console cable is connected from Nokia IP330, (COM1 is in this example) and click OK

Click Restore Defaults and click OK

Now Power ON the Nokia IP330 device, you should able to see the basic booting messages, wait till you get the following options :

1. Boot Manager
2. IPSO

Press 1

On boot manager command, type "install" and provide the required information when asked.
Basically it asks, type of FTP Connection (Make sure, FTP is running on your machine and Firewall is off, and the gate way is the IP you are going to assign for your Nokia IP330. Make ftp home directory as where IPSO CD is loaded), IP Address of Nokia Device and FTP IP address, and Speed/Duplex settings, etc.

You will be prompted with three options

1. Install all packages without prompt
2. Install all packages with prompt
3. No packages

We select option 3 so that only IPSO will be installed.

Once installation is completed, reboot the machine and provide the required data when it prompts.

Now you should able to open GUI (Voyager) from your machine through browser with the IP assigned for Nokia IP330 and you can able to manage your Nokia IP330

INSTALLAING CHECKPOINT THROUGH VOYAGER)

1. Download IPSO Wrapper from CheckPoint site and store it into your ftp home folder
2. Open Voyager GUI through browser and login with admin id and password
3. Goto Manage installed packages - FTP and new packages - provide FTP server IP, user id and password and Finally click Apply
4. It will extract the wrapper. Now install the wrapper. You may watch the status in console by seeing online log file which is located in /var/log/ (tail -f /var/log/newpkg.log)
5. restart machine or relogin (su -).
6. Restart CheckPoint "cpstop" and "cpstart" from /opt/CPshared-50-04/bin
7. Now run cpconfig from console from /opt/CPshared-50-04/bin
8. Provide all required details when prompts. Usually, License details, Management stations IP, GUI Enable, and Admin users, etc....
9. Install Checkpoint Client (Smart Center) on Management station and connect to the Nokia IP330 Firewall.
10. Make necessary settings and rules according to your company policies.


Have lot of fun ......

Sikkandar dot linux at Gmail.Com

No comments: