Nokia IP45 Security Platform User’s Guide v4.0

21

1

Introduction

This chapter introduces the Nokia IP45 security platform and includes the following topics:

±

About the Nokia IP45 Security Platform

±

Nokia IP45 Security Platform Features

±

Network Requirements

±

Nokia IP45 Security Platform Front Panel

±

Nokia IP45 Security Platform Rear Panel

About the Nokia IP45 Security Platform

The Nokia IP45 security platform provides dependable Internet access for the remote and branch

offices of a distributed enterprise. The Nokia IP45 supports features like dial-up connection,

redundant WAN connection to headquarters, and dual homing with BGP to route return traffic

securely, over VPN. IP45 appliances are RoHS complaint.

The Nokia IP45 security platform can be integrated with an overall enterprise security policy for

maximum security. The IP45 facilitates centralized management and automatic deployment with

the security management architecture of Check Point and Nokia Horizon Manager.

The Nokia IP45 security platform is available with the following licenses:

±

Nokia IP45 Tele 8

±

Nokia IP45 Satellite 16

±

Nokia IP45 Satellite 32

±

Nokia IP45 Satellite U (Unlimited)

All these versions of the Nokia IP45 provide a Web-based interface that enables you to configure

and manage the Nokia IP45.

The Nokia IP45 security platform comes pre-installed with the license of your choice. You can

upgrade the IP45 security platform to a more advanced configuration without replacing the

hardware. For details about license upgrade, contact your local reseller.

Nokia IP45 Tele 8

Nokia IP45 Tele 8 is for home telecommuters and work extenders who also need VPN client

access. The IP45 Tele 8 supports both firewall and VPN client capabilities over an eight-node

1

Introduction

22

Nokia IP45 Security Platform User’s Guide v4.0

network. The device supports VPN client capabilities for users to connect to the central office

from their home with firewall protection, extending the enterprise network to the employees’

home offices.

IP45 Tele 8 can act as a VPN server, which allows a single user to securely access resources

protected by the device from home or while travelling.

Note

Computers that actually pass through the firewall are counted. Devices such as network

printers connected in LAN that do not normally get connected to the Internet are not

counted.

Nokia IP45 Satellite 16, Satellite 32, Satellite Unlimited

Nokia IP45 Satellite 16, IP45 Satellite 32, and IP45 Satellite Unlimited provide full firewall, and

VPN connectivity for remote and branch offices or independent, small, and medium enterprises

with sixteen, thirty-two, and unlimited node networks, respectively. Using these solutions,

remote and branch offices can securely exchange information between them with distributed

enterprises and small and medium enterprises at a low price with excellent performance.

Nokia IP45 Security Platform Features

The following section contains a summary of the Nokia IP45 security platform features.

Connectivity

Table 3 provides details about the IP45 v4.0 connectivity.

Table 3

Nokia IP45 Security Platform Connectivity

Feature

Nokia IP45 Tele 8

Nokia IP45 Satellite

16/32/Unlimited

LAN, WAN, and console

ports

DMZ Support

Manual Ethernet port

settings

About the Nokia IP45 Security Platform

Nokia IP45 Security Platform User’s Guide v4.0

23

Dynamic routing by

using OSPF

Unnumbered PPP

Users (nodes)

8

16, 32, unlimited

PPPoE client

PPTP client

DHCP client

DHCP server

DHCP relay

Backup DHCP relay

DHCP reservation

Table 3

Nokia IP45 Security Platform Connectivity (

continued

)

Feature

Nokia IP45 Tele 8

Nokia IP45 Satellite

16/32/Unlimited

1

Introduction

24

Nokia IP45 Security Platform User’s Guide v4.0

Customizing DHCP

Options (DNS servers,

WINS servers, NTP

servers, Domain name,

VoIP call managers,

TFTP server and TFTP

boot file name)

Static IP

MAC cloning

MAC Cloning for WAN2

Static NAT, static routes

Dial-up Internet

connection

Routing support by

using BGP

Source routing

High-Availability

(Group ID, enhanced

interface tracking, VPN

effect, WAN Virtual IP)

Traffic Shaper

Table 3

Nokia IP45 Security Platform Connectivity (

continued

)

Feature

Nokia IP45 Tele 8

Nokia IP45 Satellite

16/32/Unlimited

About the Nokia IP45 Security Platform

Nokia IP45 Security Platform User’s Guide v4.0

25

Firewall

Table 4 provides details about the IP45 security platform firewall connectivity.

Traffic Shaper

enhancements

Traffic Monitor

Dead Connection

Detection

Table 4

Firewall Connectivity

Feature

Nokia IP45 Tele 8

Nokia IP45 Satellite

(16/32/Unlimited)

Firewall Type

Check Point Firewall-1

Embedded NG

Check Point Firewall-1

Embedded NG

Network Address

Translation (NAT)

INSPECT policy rules

User defined rules

Three levels of Preset

security policies

DoS protection

Table 3

Nokia IP45 Security Platform Connectivity (

continued

)

Feature

Nokia IP45 Tele 8

Nokia IP45 Satellite

16/32/Unlimited