Nokia IP2255
Nokia IP2255 security appliance delivers consistent in-line reliability, simple deployment and management for the most demanding perimeter and internal security locations. It offers excellent high-availability and expansion capabilities with built-in features to deliver maximum performance and network availability.
Nokia IP2255 is a flash-based, purpose-built, trusted enterprise security appliance providing in excess of 8 Gbps of performance, and featuring the following:
- Nokia IPSO secure operating system
- Nokia Accelerated Data Path (ADP) software acceleration technology
- Nokia Horizon Manager and Appliance Manager for companies who need to manage multiple Nokia devices.
Features
- Expansion capacity up to 20 gigabit Ethernet ports or 36 10/100 Ethernet ports
- HA via either Nokia VRRP or IP Clustering
- Nokia dynamic unicast and multicast routing protocols
- Redundant, hot-swappable power supplies and fans
- Managed via GUI or CLI and multi-device management
Benefits
- Optimized and fully tested solution helps ensure security and reliability
- Trusted reliable hardware ensures confidence in investment
- Best-in-class price/performance delivers optimal ROI
- Simple, yet comprehensive, security and management reduces complexity and administrative time and cost
- Single vendor for industry-leading support leverages security investments and helps deliver peace of mind
Nokia IP2255
Internet Protocols
- IP RFC 791
- ICMP RFC 792
- ARP RFC 826
- ICMP Router Discovery (server) RFC 1256
- Router Discovery v6 (ICMP v6) RFC 2466
- CIDR RFC 1519
- Static Routes
- RIP RFC 1058
- RIP Version 2 (with authentication) RFC 1723
- RIPng (IPv6) RFC 2080
- OSPF RFC 2328
- OSPF NSSA RFC 3101
- OSPFv3 (IPv6) RFC 2740
- DVMRP (multicast) RFC 1075
- IGMP (multicast) RFC 2236 , IGMPv3 RFC 3376
- PIM-SM and PIM-SSM RFC 4601
- PIM-DM RFC 3973
- PIM-DM State Refresh draft-ietf-pim-refresh-02.txt
- Multicast Tunnels
- IGRP (optional) Cisco
- BGP4 (optional) RFC 1771
- BGP4++ RFC 2545, 2858 (unicast IPv6)
- IPv4 RFC 791
- IPv6 Core RFCs
- VRRPv2 RFC 3768
- VRRPv3 (IPv6) draft-ietf-vrrp-ipv6-spec-08.txt
- Mobile IP (IPv4) RFC 2794, RFC 3024, RFC 3344, RFC 3519
- Requirements for IPv4 Routers RFC 1812
- Differentiated Services (EF) RFC 2598
- Bootp/DHCP Relay RFC 2131
- Route Aggregation & Redistribution
- Unnumbered Interfaces
- Link negotiation IEEE 802.3
- Flow control IEEE 802.3
- Private (RFC 1918) and Public IP Routing
- VLAN 802.3Q
LAN Support
- 10/100 Mbps Ethernet 10/100 BASE-TX
- 1000 BASE-SX Multimode Fiber (MMF)
- 1000 BASE-T (1000 Mbps only)
- 1000 Mbps MMF Ethernet
- 10/100/1000 Copper Ethernet
- 1000 Mbps Copper Ethernet (1000 Mbps only)
- 10 Gigabit Ethernet 10GBASE-SR
WAN Support
- PPP RFC 1661, 1662
- Frame Relay FRF.1, RFC 1490
- HDLC Cisco
Performance
- FW Connections Per Second (87,000)
- Firewall forwarding (8.9 Gbps)
- VPN forwarding (2.3 Gbps)
- Max 725,000 FW TCP Sessions
Management
- SNMP RFC 1157, SNMPv2c, SNMPv3
- Telnet RFC 854
- FTP RFC 959
- SSHv2 (secure Telnet and FTP)
- HTTP Server RFC 2068
- SSL/TLS RFC 2246
- Command Line Utilities
- Supported in Nokia Horizon Manager
Application Acceleration
- Accelerated
- VPN (requires optional card) Data Path (ADP)
Environment
- Temperature: 41°F to 104°F / 5°C to 40°C
- Humidity: 10% - 90% (non-condensing)
- Altitude: 10,000 ft
High Availability
- VRRP RFC 2338
- Check Point FireWall-1 State Sync
- Patented Nokia IP Clustering
- Redundant, hot swappable fans
- Redundant, hot swappable power supplies
System Indicators
- Integrated 10/100 Ethernet port status
- Power status on system
- Failure status on system
- Port status on network interface cards
Security
- Secure Administrative Access
- Role-Based Administration
- 3rd party administrator authorization
- Read/Write and Read-Only Access Modes
- SSH (secure Telnet and FTP)
- SSL/TLS (secure HTTP) RFC 2246
- S/Key (one-time password) RFC 1760
- Access Control Lists
- Traffic Management
- MD5 Routing
- Authentication (RIPv2) RFC 1723
- Centralized Authentication
- Native IPSec (for non-firewall applications)
- DNS Client, NTP Client and Server
- RADIUS Client, TACACS+ Client
Supported Standards
- IPSec (RFCs 2401-2411, 2451)
- GRE (RFCs 1701 and 1702) Generic Routing Encapsulation
- Designed to meet NEBS III, and FIPS 140-2 (kit required)
- Directive 2002/95/EC Restriction of the Use of Certain Hazardous Substances in Electrical and Electronic Equipment (RoHS)
- Directive 2002/96/EC Waste Electrical and Electronic Equipment (WEEE)
Safety
- UL60950, CAN/CSA 22.2, No. 60950-M95, (CE Mark) EN60950:1992, A1, A2:1993, A3:1995, A4:1997,A11:1998 with Japanese National Deviations Emission Compliance
Emission Compliance
- FCC Part 15, Subpart B, Class A, EN55024, EN55022A: 1998, CISPR 22 Class A 1985, EN61000- 3-2, EN61000-3-3
Immunity
Base System Configuration
- 4-port 1000BASE-T cPCI Management Card
- 4 ADP slots for optional ADP cards
- 2 Type II PCMCIA slots
- 2 GB System RAM
- Redundant, hot swappable power supplies
- Redundant, hot swappable fans
Card-based Options
- 8-Port 10/100 BASE-TX Ethernet ADP Card
- 4-Port 1000BASE-T Copper ADP Card
- 4-Port 1000BASE-SX, MMF ADP Card
- Nokia Encrypt Card
- 1-Port 10GBASE-SR Interface, ADP
- 4-port 1000BASE-T cPCI Management Card
Power Requirements
- AC Input Voltage 100-120V/200- 240VAC
- Frequency 50/60Hz
- AC Input Current 3.0/1.5A
Dimensions
- Height: 5.21 in (13.2 cm) – 3RU
- Width: 19 in (48 cm) – with rack mounting ears
- Width: 17 in (43.2 cm) – without rack mounting ears
- Depth: 24.45 in (62 cm) – including front and rear handles
- Weight: 47.5 lbs / 21.6 kg
- Forward slide-out tray for maintenance
Support
Nokia offers world-class global support and services to service providers, distributors, resellers and enterprise customers who buy, sell and use Nokia security and mobility products. Nokia is recognized for world-class support and is dedicated to excellence with Technical Assistance Centers around the world, and on-site service capabilities in 1,000+ metropolitan areas covering more than 150 countries.
- Global network of 7x24x365 Technical Assistance Centers
- Nokia First Call - Final Resolution support
- Worldwide product part spares and on-site services
- Software Subscription service delivers updates, minor feature releases and device compatibility
Visit business services and support for more information on support for security products.
Nokia IP2255 security appliance is a high-performance, highly reliable network firewall for Check Point VPN-1 and Check Point VPN- 1 Power. Nokia IP2255 is designed specifically for the demanding performance, port-density requirements and enterprise security needs of carriers, service providers, e-commerce sites and enterprise data center cores.
