Installing an ASA 310-FIPS in a New Cluster 61

( new setup, continued)

Verify that HSM-SO iKey (purple) is inserted in card 1

(with flashing LED).

Hit enter when done.

Enter a new HSM-SO password for card 1: <define a new

HSM-SO password, or use the same HSM-SO password as for

card 0>

Re-enter to confirm:

The HSM-SO iKey has been updated.

Verify that HSM-USER iKey (blue) is inserted in card 1 (with flashing LED).

Hit enter when done.

Enter a new HSM-USER password for card 1: <define a new

HSM-USER password, or use the same HSM-USER password as

for card 0>

Re-enter to confirm:

The HSM-USER iKey has been updated.

Card 1 successfully initialized.

6Split the wrap key from HSM card 0 onto the CODE-SO and CODE-USER iKeys.

This step is related to splitting the software wrap key used internally in the cluster, and then loading the split wrap key onto the two black CODE-SO and CODE-USER iKeys. These iKeys will then be used to transfer the cluster wrap key onto another HSM card either within the same ASA 310-FIPS device (as in Step 7), or to HSM cards in an ASA 310-FIPS device that is added to the current cluster.

Each ASA 310-FIPS device is shipped with four black CODE iKeys. However, you will only need to use two of these in one given cluster. The extra two black iKeys can be used to create a pair of backup CODE iKeys. For more information about how to create a pair of backup CODE iKeys, see the splitkey command on the HSM menu (described under Maintenance Menu in the Command Reference).

To successfully split and load the cluster wrap key onto the correct iKeys, you need the following:

•Two black CODE iKeys, supposedly labeled "CODE-SO" and "CODE-USER" respectively.

If the black iKeys are not already labeled CODE-SO and CODE-USER respectively, you are recommended to do so before inserting them. Whenever the cluster wrap key needs to be transferred onto an initialized HSM card, you will be prompted for the specific CODE iKey, in turns. Having each iKey properly

Nortel VPN Gateway

User Guide

NN46120-104 02.01 Standard

14 April 2008

Copyright © 2007-2008 Nortel Networks

Page 60 Page 62
Page 61
Image 61
Nortel Networks NN46120-104 manual HSM-SO password, or use the same HSM-SO password as for Card
Page 60 Page 62

NN46120-104 specifications

Nortel Networks NN46120-104 is a versatile and efficient telecommunications hardware platform designed to meet the demands of modern networking environments. As a part of Nortel’s extensive portfolio, this device showcases the company’s commitment to innovation and reliability in the telecom sector.

One of the main features of the NN46120-104 is its robust performance capabilities. This platform is capable of handling high traffic volumes, making it suitable for medium to large enterprises. With its advanced routing capabilities and support for various protocols, the device ensures seamless communication across multiple network segments, providing efficient data transfer and connectivity.

The NN46120-104 is built upon the foundation of Nortel's renowned Layer 3 switching technology. This allows it to intelligently direct data packets based on their IP addresses, optimizing both speed and reliability. The inclusion of Virtual LAN (VLAN) support enhances network segmentation, improving security and management while reducing broadcast domains.

In terms of interface options, the NN46120-104 supports an array of Ethernet configurations, including Gigabit and Fast Ethernet ports. This flexibility allows organizations to tailor their networking solutions to their specific needs while enabling easy upgrades as technology evolves. The device also supports Power over Ethernet (PoE), facilitating the deployment of powered devices like IP phones and wireless access points without the need for additional power sources.

Another significant characteristic of the NN46120-104 is its robustness in terms of security features. With support for advanced security protocols and features such as Access Control Lists (ACLs), the device helps safeguard sensitive data by controlling traffic flow and restricting unauthorized access.

Additionally, the NN46120-104 is designed for ease of management. It offers an intuitive interface and supports various management protocols, including Simple Network Management Protocol (SNMP), enabling administrators to monitor and configure the device efficiently.

In summary, the Nortel Networks NN46120-104 combines high performance, extensive connectivity options, advanced security features, and ease of management, making it a formidable choice for enterprises looking to enhance their network infrastructure. Its capabilities align well with the rigorous demands of today’s digital communication landscape, ensuring reliability and efficiency in organizational operations.
Top Page Image Contents