Nokia IP2255

Nokia IP2255 security appliance delivers consistent in-line reliability, simple deployment and management for the most demanding perimeter and internal security locations. It offers excellent high-availability and expansion capabilities with built-in features to deliver maximum performance and network availability.

Nokia IP2255 is a flash-based, purpose-built, trusted enterprise security appliance providing in excess of 8 Gbps of performance, and featuring the following:

• Nokia IPSO secure operating system
• Nokia Accelerated Data Path (ADP) software acceleration technology
• Nokia Horizon Manager and Appliance Manager for companies who need to manage multiple Nokia devices.

Features

• Expansion capacity up to 20 gigabit Ethernet ports or 36 10/100 Ethernet ports
• HA via either Nokia VRRP or IP Clustering
• Nokia dynamic unicast and multicast routing protocols
• Redundant, hot-swappable power supplies and fans
• Managed via GUI or CLI and multi-device management

Benefits

• Optimized and fully tested solution helps ensure security and reliability
• Trusted reliable hardware ensures confidence in investment
• Best-in-class price/performance delivers optimal ROI
• Simple, yet comprehensive, security and management reduces complexity and administrative time and cost
• Single vendor for industry-leading support leverages security investments and helps deliver peace of mind

Nokia IP2255

Internet Protocols

• IP RFC 791
• ICMP RFC 792
• ARP RFC 826
• ICMP Router Discovery (server) RFC 1256
• Router Discovery v6 (ICMP v6) RFC 2466
• CIDR RFC 1519
• Static Routes
• RIP RFC 1058
• RIP Version 2 (with authentication) RFC 1723
• RIPng (IPv6) RFC 2080
• OSPF RFC 2328
• OSPF NSSA RFC 3101
• OSPFv3 (IPv6) RFC 2740
• DVMRP (multicast) RFC 1075
• IGMP (multicast) RFC 2236 , IGMPv3 RFC 3376
• PIM-SM and PIM-SSM RFC 4601
• PIM-DM RFC 3973
• PIM-DM State Refresh draft-ietf-pim-refresh-02.txt
• Multicast Tunnels
• IGRP (optional) Cisco
• BGP4 (optional) RFC 1771
• BGP4++ RFC 2545, 2858 (unicast IPv6)
• IPv4 RFC 791
• IPv6 Core RFCs
• VRRPv2 RFC 3768
• VRRPv3 (IPv6) draft-ietf-vrrp-ipv6-spec-08.txt
• Mobile IP (IPv4) RFC 2794, RFC 3024, RFC 3344, RFC 3519
• Requirements for IPv4 Routers RFC 1812
• Differentiated Services (EF) RFC 2598
• Bootp/DHCP Relay RFC 2131
• Route Aggregation & Redistribution
• Unnumbered Interfaces
• Link negotiation IEEE 802.3
• Flow control IEEE 802.3
• Private (RFC 1918) and Public IP Routing
• VLAN 802.3Q

LAN Support

• 10/100 Mbps Ethernet 10/100 BASE-TX
• 1000 BASE-SX Multimode Fiber (MMF)
• 1000 BASE-T (1000 Mbps only)
• 1000 Mbps MMF Ethernet
• 10/100/1000 Copper Ethernet
• 1000 Mbps Copper Ethernet (1000 Mbps only)
• 10 Gigabit Ethernet 10GBASE-SR

WAN Support

• PPP RFC 1661, 1662
• Frame Relay FRF.1, RFC 1490
• HDLC Cisco

Performance

• FW Connections Per Second (87,000)
• Firewall forwarding (8.9 Gbps)
• VPN forwarding (2.3 Gbps)
• Max 725,000 FW TCP Sessions

Management

• SNMP RFC 1157, SNMPv2c, SNMPv3
• Telnet RFC 854
• FTP RFC 959
• SSHv2 (secure Telnet and FTP)
• HTTP Server RFC 2068
• SSL/TLS RFC 2246
• Command Line Utilities
• Supported in Nokia Horizon Manager

Application Acceleration

• Accelerated
• VPN (requires optional card) Data Path (ADP)

Environment

• Temperature: 41°F to 104°F / 5°C to 40°C
• Humidity: 10% - 90% (non-condensing)
• Altitude: 10,000 ft

High Availability

• VRRP RFC 2338
• Check Point FireWall-1 State Sync
• Patented Nokia IP Clustering
• Redundant, hot swappable fans
• Redundant, hot swappable power supplies

System Indicators

• Integrated 10/100 Ethernet port status
• Power status on system
• Failure status on system
• Port status on network interface cards

Security

• Secure Administrative Access
• Role-Based Administration
• 3rd party administrator authorization
• Read/Write and Read-Only Access Modes
• SSH (secure Telnet and FTP)
• SSL/TLS (secure HTTP) RFC 2246
• S/Key (one-time password) RFC 1760
• Access Control Lists
• Traffic Management
• MD5 Routing
• Authentication (RIPv2) RFC 1723
• Centralized Authentication
• Native IPSec (for non-firewall applications)
• DNS Client, NTP Client and Server
• RADIUS Client, TACACS+ Client

Supported Standards

• IPSec (RFCs 2401-2411, 2451)
• GRE (RFCs 1701 and 1702) Generic Routing Encapsulation
• Designed to meet NEBS III, and FIPS 140-2 (kit required)
• Directive 2002/95/EC Restriction of the Use of Certain Hazardous Substances in Electrical and Electronic Equipment (RoHS)
• Directive 2002/96/EC Waste Electrical and Electronic Equipment (WEEE)

Safety

• UL60950, CAN/CSA 22.2, No. 60950-M95, (CE Mark) EN60950:1992, A1, A2:1993, A3:1995, A4:1997,A11:1998 with Japanese National Deviations Emission Compliance

Emission Compliance

• FCC Part 15, Subpart B, Class A, EN55024, EN55022A: 1998, CISPR 22 Class A 1985, EN61000- 3-2, EN61000-3-3

Immunity

• EN55024: 1998

Base System Configuration

• 4-port 1000BASE-T cPCI Management Card
• 4 ADP slots for optional ADP cards
• 2 Type II PCMCIA slots
• 2 GB System RAM
• Redundant, hot swappable power supplies
• Redundant, hot swappable fans

Card-based Options

• 8-Port 10/100 BASE-TX Ethernet ADP Card
• 4-Port 1000BASE-T Copper ADP Card
• 4-Port 1000BASE-SX, MMF ADP Card
• Nokia Encrypt Card
• 1-Port 10GBASE-SR Interface, ADP
• 4-port 1000BASE-T cPCI Management Card

Power Requirements

• AC Input Voltage 100-120V/200- 240VAC
• Frequency 50/60Hz
• AC Input Current 3.0/1.5A

Dimensions

• Height: 5.21 in (13.2 cm) – 3RU
• Width: 19 in (48 cm) – with rack mounting ears
• Width: 17 in (43.2 cm) – without rack mounting ears
• Depth: 24.45 in (62 cm) – including front and rear handles
• Weight: 47.5 lbs / 21.6 kg
• Forward slide-out tray for maintenance

Support

Nokia offers world-class global support and services to service providers, distributors, resellers and enterprise customers who buy, sell and use Nokia security and mobility products. Nokia is recognized for world-class support and is dedicated to excellence with Technical Assistance Centers around the world, and on-site service capabilities in 1,000+ metropolitan areas covering more than 150 countries.

• Global network of 7x24x365 Technical Assistance Centers
• Nokia First Call - Final Resolution support
• Worldwide product part spares and on-site services
• Software Subscription service delivers updates, minor feature releases and device compatibility

Visit Business Services and Support for more information on support for security products.

• Security Product Summary Guide
  (PDF file, 527 KB)

Product datasheets

• Nokia IP2255 datasheet
  (PDF file, 225 KB)
• Nokia IPSO datasheet
  (PDF file, 66 KB)
• Essential Requirements of a Network Security Appliance
  (PDF file, 229 KB)

Comparison matrix

• IP Security Platform Comparison Matrix
  (PDF file, 768 KB)

White papers

• SecureXL and Nokia IPSO™ White paper
  (PDF file, 510 KB)
• Interaction Between Nokia Intrusion Prevention and Nokia Firewall
  (PDF file, 388 KB)
• Nokia IP Clustering
  (PDF file, 501 KB)
• Nokia IPSO Quality of Service
  (PDF file, 138 KB)