Juniper Networks IDP 800, IDP75, IDP8200, IDP250 manual

Contents

Main Releases 4.1r2a and 4.2 April 2008 Copyright Notice FCC Statement Disclaimer Table of Contents Page Page Page List of Figures Page List of Tables Page About This Guide Audience Conventions Documentation Web Access for Documentation Requesting Technical Support Self-Help Online Tools and Resources Opening a Case with JTAC Page Chapter 1 Planning an Installation Installation Roadmap IDP Configuration Basics IDP Sensor Placement IDP Sensor Deployment Mode Page 4 Figure 2: Transparent Mode (Inline Active) Table 2: Advantages and Disadvantages of Sniffer Mode (Passive) NetScreen-Security Manager Table 3: Advantages and Disadvantages of Transparent Mode (Inline Active) Page Chapter 2 Hardware Overview IDP Sensors IDP 75 Sensor IDP 250 Sensor IDP 800 Sensor IDP 8200 Sensor Traffic Ports (Forwarding Interfaces) Configurable NIC States Normal State NIC Bypass State NIC Bypass and Cable Choices External Bypass Unit State NICs Off State Peer Port Modulation Management Ports Console Serial Port Management Port Hard Drives and USB Ports IDP Sensor LEDs System Status LEDs Management and High Availability Port LEDs Figure 8: LEDs for Management and HA Ports Traffic Port LEDs The IDP 75, 250, 800, and 8200 sensors each have two traffic status LEDs on each traffic port. Hard Drive LEDs on Front Panel Table 8: IDP Sensor Management and High Availability Port LED Port LED Description Status Table 9: IDP Sensor Traffic Port LEDs Indicator Location Color/Status Speed/Description Power Supply LEDs on Back Panel Table 10: Hard Drive LED Definitions Front Panel LED Description Table 11: Power Supply LED Definitions Back Panel LED Description Chapter 3 Installing the Sensor General Installation Guidelines Rack Mounting the IDP Sensor Required Tools Mounting Using Device Rack Rails Mounting Using Midmount Brackets Connecting Power Chapter 4 Configuring the IDP Sensor Initial Configuration Options Simple Configuration Simple Configuration Settings Simple Configuration Values Advanced Configuration Connecting to the Sensor Using the Console Serial Port to Configure the Sensor Page Using the Management Port to Configure the Sensor Connecting Directly Using the Management Port Connecting Remotely Using the Management Port Simple or Advanced Configuration Using the Management Port 26 QuickStart Simple Configuration Table 12 provides the information you need for a simple configuration. ACM Advanced Configuration Table 12: Information Needed for QuickStart Configuration Field Configuration Information Table 13: Information Needed for ACM Configuration Section Configuration Information Table 13: Information Needed for ACM Configuration (continued) Section Configuration Information Connecting Forwarding Interfaces Verifying Traffic Flow Connecting the High Availability Port Chapter 5 Adding the Sensor to NSM Adding Your Sensor to NSM Page Page Page Checking the Status of Your Sensor Page Chapter 6 Updating Software on the Sensor Updating IDP Sensor Software Using NSM Firmware Manager Loading a Sensor Image into NSM Upgrading Sensor Software Updating IDP Sensor Software Without NSM Reimaging the IDP Sensor Page Chapter 7 Servicing the Device Replacing a Power Supply (IDP 800, and 8200 Only) Remove a Power Supply Install a Power Supply Replacing a Hard Drive (IDP 800 and 8200 Only) Remove a Hard Drive Install a Hard Drive Page Chapter 8 Advanced Configuration Advanced Deployment Modes Bridge Mode IDP 75, 250, 800, and 8200 Installation Guide 44 Figure 21: Bridge Mode Table 14: Advantages and Disadvantages of Bridge Mode equipment Cannot connect IP networks with different Router Mode Figure 22: Router Mode Table 15: Advantages and Disadvantages of Router Mode Reliably responds to and prevents attacks Connects IP networks with different address spaces Proxy-ARP Mode IDP High Availability Deployment Modes Appendix A Specifications 48 IDP 75 Technical Specifications IDP 250 Technical Specifications 50 IDP 800 Technical Specifications IDP 8200 Technical Specifications Safety Compliance EMI Compliance Immunity Index