X-Series Installation and Safety Guide Version 2.
Part Number: TECHD-0000000122 Publication Control Number: 102506:0914 Digital Vaccine is a registered trademark and TippingPoint and the TippingPoint logo are trademarks of 3Com Corporation or one of its subsidiaries. This document contains confidential information or trade secrets or both, which are the property of 3Com Corporation.
Table of Contents Table of Contents Table of Contents i List of Figures v List of Tables vii About This Guide ix Overview Target Audience Organization Conventions Headings Typeface Cross References Messages Related Documentation Customer Support Contact Information Chapter 1: Overview Overview TippingPoint X-Series Overview Core Functionality TippingPoint X-Series Environment Optimized VPN Connectivity Policy Enforcement Security Zones and Network Interfaces TippingPoint IPS Threat Suppression Eng
Table of Contents Chapter 2: Prepare the Site Overview Safety Requirements Class A Notices General Guidelines Rack and Clearance Requirements Ventilation and Location Environmental Requirements Reliable Earthing System Grounding Requirements Unpack the TippingPoint System ii 7 7 8 8 9 12 12 12 12 12 13 Chapter 3: TippingPoint X505 Overview 15 Overview Chassis Overview Chassis Features LEDs Technical Specifications Hardware Specifications Technical Specifications Software Specifications Hardware Instal
Table of Contents Connector and Pinout Specifications Port Connectors Index 31 31 35 X-Series Hardware Installation and Safety Guide V 2.
Table of Contents iv X-Series Hardware Installation and Safety Guide V 2.
List of Figures List of Figures Figure 3 - 1: TippingPoint X505 - Front Panel Figure 3 - 2: TippingPoint X505 - Back Panel Figure 4 - 1: TippingPoint X506 - Front Panel Figure A - 1: RJ-45 Connector Figure A - 2: DB-9 Connector X-Series Hardware Installation and Safety Guide V 2.
List of Figures vi X-Series Hardware Installation and Safety Guide V 2.
List of Tables Table About - 1: TippingPoint Documents Table About - 2: Customer Support Information Table 1: X-Series System Performance Table 2 - 1: Environmental Requirements for the TippingPoint X-Series Table 3 - 3: LED Descriptions Table 3 - 4: Management Port LED Descriptions Table 3 - 5: TippingPoint X-Series X505 Specifications Table 3 - 6: TippingPoint X505 Hardware Specifications Table 3 - 7: Software Specifications for the TippingPoint X-Series IPS Table 3 - 8: Rack Space Requirements Table 4 -
List of Tables viii X-Series Hardware Installation and Safety Guide V 2.
About This Guide Explains who this book is intended for, how the information is organized, where information updates can be found, and how to obtain customer support if you cannot resolve a problem. Overview Welcome to the TippingPoint X-Series Hardware Installation and Safety Guide. The TippingPoint XSeries combines firewall and VPN functionality with the TippingPoint Intrusion Prevention System (IPS) to provide a unified approach to network security.
About This Guide Organization The TippingPoint X-Series Hardware Installation and Safety Guide is organized as follows: About the Guide Explains who this book is intended for, how the information is organized, where information updates can be found, and how to obtain customer support if you cannot resolve a problem. TippingPoint Overview Provides a description of the deployment environment of the TippingPoint X-Series, including layout and illustrations of hardware components and features.
Conventions Conventions This book, and the other books in this series, follow some conventions for structuring information. Headings Every chapter starts with a brief description of the information you can find in that chapter, which correlates with the major headings in that chapter. Each major heading corresponds to a task or concept that is important for you to understand.
About This Guide Warnings have an icon to the left showing a white lightning bolt drawn inside of a red octagon. Warnings also start with the word “WARNING”, and are presented in bold face type. WARNING: Only trained and qualified personnel should install, replace, or service this equipment. Disconnect the system before servicing. Caution Cautions tell you how to avoid a serious loss that stops short of physical damage such as the loss of data, time, or security.
Related Documentation Related Documentation The TippingPoint X-Series systems have a full set of documentation. These publications are available in electronic format on your installation CDs. For the most recent updates, check the Threat Management Center (TMC) web site at https://tmc.tippingpoint.com.
About This Guide Table About - 1: TippingPoint Documents (Continued) System Administrators X-Series Command Line Interface Reference TippingPoint X-Series Documentation CD, https://tmc.tippingpoint.com X-Series Concepts Guide TippingPoint X-Series Documentation CD, https://tmc.tippingpoint.com X-Series Local Security Manager User’s Guide TippingPoint X-Series Documentation CD, https://tmc.tippingpoint.
Customer Support Customer Support The TippingPoint customer support phone number is 1-866-681-8324. TippingPoint is committed to providing quality customer support to all of its customers. Each customer is provided with a customized support agreement that provides detailed customer and support contact information.
About This Guide xvi X-Series Hardware Installation and Safety Guide V 2.
1 Overview This chapter introduces TippingPoint concepts and functionality. It provides an overview of the TippingPoint X-Series. The TippingPoint X-Series includes the following models: X505 and X506. Overview In the highly technical era of data transfers and the Internet, the protection of data and networks concern most businesses, corporations, and network administrators. TippingPoint has studied the issue of data security and network protection from malicious activity and attacks.
Chapter 1: Overview The Stateful IP filtering provides service-level, stateful inspection of network traffic. It incorporates filtering functionality to protect mission-critical applications. An administrator can use firewalls and content filters that determines how the system handles traffic to and from a particular service. These filters are specified by the source, destination, and service or protocol of the traffic. The X-Series is responsible for the host and service database used by TippingPoint.
TippingPoint X-Series Environment Series and IPS devices across your TippingPoint environment for administration, configuration, and monitoring. Most importantly, the SMS includes enterprise-wide reporting and trend analysis. From the SMS, you must set an overall profile of settings for each X-Series. The profile controls how the device responds to traffic that matches filters. The X-Series is always in Active mode, and reacts to traffic as specified by the appropriate filter.
Chapter 1: Overview The TippingPoint IPS is designed to handle the extremely high demands of carriers and high-density data centers. Even while under attack, TippingPoint Intrusion Prevention Systems are extremely lowlatency network infrastructure ensuring switch-like network performance. The TippingPoint IPS is an active network defense system that uses the Threat Suppression Engine (TSE) to detect and respond to attacks.
TippingPoint X-Series Environment of the management functionality offered through the Security Management System, which is designed to manage several X-Series units from a central server. You access the LSM through a web-browser (Internet Explorer V. 6+ and Firefox). The application accesses the TippingPoint Operating System and settings stored on the device. Through the LSM, you can manage settings directly to the device. You access each device to use the LSM.
Chapter 1: Overview MGM 6 X-Series Hardware Installation and Safety Guide V 2.
2 Prepare the Site This chapter discusses the general requirements necessary to prepare your site for the installation of the TippingPoint X-Series System. Overview Before installing the new TippingPoint X-Series, you need to gather materials and prepare the network and hardware site. To carefully and correctly install the component(s) you must read through all preparation instructions and requirements. This chapter includes general guideline information for all TippingPoint devices.
Chapter 2: Prepare the Site Safety Requirements If not properly installed and maintained, electrical circuitry equipment like the TippingPoint X-Series can pose dangers to both personnel and equipment. To prevent accidents, adhere to the following guidelines to ensure general safety: • Remove any dust from the area and keep the area around the TippingPoint X-Series system clear and dust-free during and after installation.
Safety Requirements General Guidelines See the following list of cautions and warnings for further safety guidelines. CAUTION: Before you start the installation procedures, read this entire chapter for important information and safety warnings. Use proper electromagnetic static discharge (ESD) protection whenever you handle TippingPoint equipment. Do not power up the equipment while you install and connect the system.
Chapter 2: Prepare the Site WARNING: This warning symbol means danger. It tells you how to avoid physical injury to people or equipment. For people, injury includes anything from temporary conditions, such as pain, to irreversible conditions such as death. For equipment, injury means anything requiring repair. Warnings tell you what you should or should not do, and the consequences of not heeding the warning. Only trained and qualified personnel should install, replace, or service this equipment.
Safety Requirements WARNING: Only trained and qualified personnel should install, replace, or service this equipment. Disconnect the system before servicing. Read all of the installation instructions before you connect the system to its power source. Never touch uninsulated telephone wires or terminals unless the telephone line has been disconnected at the network interface. The TippingPoint X506 uses double pole/neutral fusing. Use caution when servicing this product.
Chapter 2: Prepare the Site Rack and Clearance Requirements Tipping Point recommends that you mount the TippingPoint X-Series X505 and X506 models in a standard 19-or 23-inch rack. The vertical hole spacing on the rack rails must meet standard EIA-310-C requirements, which call for a one inch (2.54 cm) spacing. Ventilation and Location Ventilation and proper location are essential to the proper operation of the TippingPoint X-Series system.
Unpack the TippingPoint System protection is required whenever you handle equipment. It is not necessary to open the TippingPoint chassis to add or remove any components. Unpack the TippingPoint System Each system chassis is securely packaged in a shipping box. CAUTION: ESD can damage the TippingPoint X-Series if you do not take necessary precautions. Installation and maintenance personnel should be properly grounded using ground straps to eliminate the risk of ESD damage to the equipment.
Chapter 2: Prepare the Site 14 X-Series Hardware Installation and Safety Guide V 2.
3 TippingPoint X505 Overview This chapter provides an overview of the TippingPoint X505. Overview This chapter describes the components, chassis, requirements, and installation of the TippingPoint XSeries X505 device. Prior to installation, you should also obtain the TippingPoint Command Line Interface Reference. After installation of the components, you will need to run through the TippingPoint Setup Wizard as part of the installation and configuration procedures.
Chapter 3: TippingPoint X505 Overview Chassis Overview The TippingPoint X505 system comprises a 1.15 rack unit chassis that uses a front-access architecture. The X505 has four ports supporting connections to two to four network security zones. The X505 is rack-mountable on a 19- or 23-inch rack. The following images shows the front and back chassis panels for a TippingPoint X505.
Chassis Overview LEDs The following table describes the LEDs. Table 3 - 3: LED Descriptions LED Activity LED Link (left side LED) 100 LED Color State Description No light No traffic Indicates that the port is not passing data. Blinking amber Data Traffic Indicates that port is passing data. No light No link Indicates that the port is not linked. Green Active Indicates that the port is connected and ready for data.
Chapter 3: TippingPoint X505 Overview Technical Specifications The following section describes the hardware, technical, and software specification for the TippingPoint X505. • “Hardware Specifications” on page 18 • “Technical Specifications” on page 19 • “Software Specifications” on page 19 Hardware Specifications The following table lists hardware specifications for the TippingPoint X-Series X505. Table 3 - 5: TippingPoint X-Series X505 Specifications Specification Dimensions 17.25 in x 12.
Hardware Installation and Configuration Technical Specifications The following table lists technical specifications on the X505 hardware.
Chapter 3: TippingPoint X505 Overview This chapter includes the following sections: • • • • • “Install the TippingPoint Chassis” on page 20 “Connect the power” on page 21 “Complete Initial Setup Configuration” on page 21 “Connect the X505 to the Internet” on page 22 “Register the TippingPoint X505” on page 22 Install the TippingPoint Chassis To install the TippingPoint you must do the following: • Determine Total Rack Space • Bolt the Device to the Rack Determine Total Rack Space Before you install the
Hardware Installation and Configuration • If the rack comes with stabilizing devices, install the stabilizers before mounting or servicing the unit in the rack. • If the rack is partially filled, load the rack from the bottom to the top with the heaviest component at the bottom of the rack. • If you plan to expand your system to include additional TippingPoint X-Series systems in the future, allow space in the rack for additions.
Chapter 3: TippingPoint X505 Overview STEP E Define additional user accounts if desired. At this point, your initial configuration of the X505 is complete. You can use the LSM to change settings in the future. Note: When you connect to the LAN address, your browser may display a security certificate warning. Accept the certificate and continue with the configuration procedure. Connect the X505 to the Internet STEP 1 Use an Ethernet cable to connect the X505 WAN port to your router.
4 TippingPoint X506 Overview This chapter provides an overview of the TippingPoint X506. Overview This chapter describes the components, chassis, requirements, and installation of the TippingPoint XSeries X506 device. Prior to installation, you should also obtain the TippingPoint X-Series Command Line Interface Reference. After installation of the components, you will need to run through the TippingPoint Setup Wizard as part of the installation and configuration procedures.
Chapter 4: TippingPoint X506 Overview Chassis Overview The TippingPoint X506 system comprises a 1 rack unit chassis that uses a front-access architecture. The X506 has six ports supporting up to six network segments and is rack-mountable on a 19- or 23inch rack. The following image shows the front chassis interface for a TippingPoint X506.
Technical Specifications The following table describes the Link and Activity LEDs that are at the upper left and right corners of each segment connector. Table 4 - 3: Segment Port LED Descriptions LED Link (left side LED) Activity (right side LED) Color State Description No light No link Indicates that the port is not linked. Green Active‘ Indicates that the port is connected and ready for data. No light No traffic Indicates that the port is not passing data.
Chapter 4: TippingPoint X506 Overview Table 4 - 4: TippingPoint X-Series X506 Specifications Specification Description Power Requirements Service Provider operating requirements 100 to 240 VAC, 1-2 amperes @ 50-60 Hz Maximum Power Consumption: 64 Watts Temperature 0 to 40 ° C (32 to104 ° F) — Operating -20 to 70° C (-4 to 158 ° F) — Storage Altitude No degradation up to 13K feet Humidity 5% to 95% (non-condensing) Technical Specifications The following table lists technical specifications for the
Hardware Installation and Configuration Software Specifications To run the TippingPoint X-SeriesIntrusion Prevention System (IPS), you need one of the following software applications/devices. Table 4 - 6: Software Specifications for the TippingPoint X-Series IPS Specification Description TippingPoint X-Series Security Management System (SMS) Software, Version 2.5 and above. (optional) SMS can optionally be used to manage multiple TippingPoint Intrusion Prevention Systems.
Chapter 4: TippingPoint X506 Overview Table 4 - 7: Rack Space Requirements Requirement Network Equipment Building Systems (NEBS) (Total number of chassis must generate: < or = 1372 Watts) Configuration Type Typical Min/Max Number of Chassis 13 chassis generating < or = 105 Watts Bolt the Device to the Rack Use the following guidelines when bolting the TippingPoint X-Series to the rack: WARNING: To prevent bodily injury when mounting or servicing this unit in a rack, you must take special precautions to
Hardware Installation and Configuration STEP A Accept the default security level of Level 2. STEP B Specify the SuperUser account information at the prompt: STEP C STEP D STEP E • User Name • Password • Confirm password Accept the default settings in the rest of the Setup Wizard by clicking No when prompted. Depending on your internet connectivity, you may need to update your WAN settings in the Virtual Interfaces setup screen.
Chapter 4: TippingPoint X506 Overview Register the TippingPoint X506 To activate your license, you must register the TippingPoint X506 on the 3Com eSupport Web site (http://esupport.3com.com). Have the following information available: • Product code 3CRTPX506-96. • Serial number. You can find the serial number: — in the Local Security Manager (LSM), on the System Summary page. — with the Command Line Interface (CLI) show version command.
A Connector and Pinout Specifications This appendix provides connector and pinout information for the TippingPoint X-Series X-Series systems. Port Connectors The TippingPoint X-Series supports the RJ-45 connectors, which have pinouts shown below. The following figure displays an RJ-45 connector. Figure A - 1: RJ-45 Connector The following table describes the pinout information for a 1000 Base-T RJ-45 connector.
Appendix A: Connector and Pinout Specifications Table A - 1: RJ-45 1000 Base-T Connector Pinouts Pin Number Signal Name 6 Twisted Pair 2 negative (TP2-) 7 Twisted Pair 4 positive (TP4+) 8 Twisted Pair 4 negative (TP4-) .The following table describes the pinout information for a 10/100 RJ-45 connector.
Port Connectors Table A - 3: DB-9 Connector Pinouts Pin Number Signal Name 4 Data Terminal Ready (DTR) 5 Ground (GND) 6 Data Set Ready (DSR) 7 Request to Send (RTS) 8 Clear to Send (CTS) 9 Ring Indicator (RI) X-Series Hardware Installation and Safety Guide V 2.
Appendix A: Connector and Pinout Specifications 34 X-Series Hardware Installation and Safety Guide V 2.
Index A I action set 1 installation environmental requirements 12 location 12 prepare the site 7 rack and clearance 12 reliable earthing 12 safety requirements 8 system grounding 12 unpacking 13 ventilation 12 installing chassis bolting device to rack 20, 28 X505 20 X506 27 IPS core functionality 2 IPSec 3 C chassis X505 20 X506 27 Class A digital apparatus 8 Command Line Interface (CLI) 2 configuration OBE Setup Wizard 21, 28 connecting to Internet 22, 29 connector & pinout specifications 31 content fi
Index 36 X-Series Hardware Installation and Safety Guide V 2.
