Nokia Firewall Supports Management Module SM-NOK1000

Transcription

1 Nokia Firewall Titlepae Supports Management Module SM-NOK1000 Device Management

2 Copyright Notice Document Copyright 2002-present by Aprisma Management Technologies, Inc. All rights reserved worldwide. Use, duplication, or disclosure by the United States government is subject to the restrictions set forth in DFARS (c)(1)(ii) and FAR Liability Disclaimer Aprisma Management Technologies, Inc. ( Aprisma ) reserves the right to make changes in specifications and other information contained in this document without prior notice. In all cases, the reader should contact Aprisma to inquire if any changes have been made. The hardware, firmware, or software described in this manual is subject to change without notice. IN NO EVENT SHALL APRISMA, ITS EMPLOYEES, OFFICERS, DIRECTORS, AGENTS, OR AFFILIATES BE LIABLE FOR ANY INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION CONTAINED IN IT, EVEN IF APRISMA HAS BEEN ADVISED OF, HAS KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES. Trademark, Service Mark, and Logo Information SPECTRUM, IMT, and the SPECTRUM IMT/VNM logo are registered trademarks of Aprisma Management Technologies, Inc., or its affiliates. APRISMA, APRISMA MANAGEMENT TECHNOLOGIES, the APRISMA MANAGEMENT TECHNOLOGIES logo, MANAGE WHAT MATTERS, DCM, VNM, SpectroGRAPH, SpectroSERVER, Inductive Modeling Technology, Device Communications Manager, SPECTRUM Security Manager, and Virtual Network Machine are unregistered trademarks of Aprisma Management Technologies, Inc., or its affiliates. For a complete list of Aprisma trademarks, service marks, and trade names, go to All referenced trademarks, service marks, and trade names identified in this document, whether registered or unregistered, are the intellectual property of their respective owners. No rights are granted by Aprisma Management Technologies, Inc., to use such marks, whether by implication, estoppel, or otherwise. If you have comments or concerns about trademark or copyright references, please send an to spectrum-docs@aprisma.com; we will do our best to help. Restricted Rights Notice (Applicable to licenses to the United States government only.) This software and/or user documentation is/are provided with RESTRICTED AND LIMITED RIGHTS. Use, duplication, or disclosure by the government is subject to restrictions as set forth in FAR (June 1987) Alternate III(g)(3) (June 1987), FAR (June 1987), or DFARS (c)(1)(ii) (June 1988), and/or in similar or successor clauses in the FAR or DFARS, or in the DOD or NASA FAR Supplement, as applicable. Contractor/manufacturer is Aprisma Management Technologies, Inc. In the event the government seeks to obtain the software pursuant to standard commercial practice, this software agreement, instead of the noted regulatory clauses, shall control the terms of the government's license. Virus Disclaimer Aprisma makes no representations or warranties to the effect that the licensed software is virus-free. Aprisma has tested its software with current virus-checking technologies. However, because no antivirus system is 100 percent effective, we strongly recommend that you write-protect the licensed software and verify (with an antivirus system in which you have confidence) that the licensed software, prior to installation, is virus-free. Contact Information Aprisma Management Technologies, Inc. 273 Corporate Drive Portsmouth, NH Phone: U.S. toll-free: Web site: Device Management Page 2 Nokia Firewall

3 Contents INTRODUCTION 4 Purpose and Scope...4 Required Reading...4 Supported Devices...5 The SPECTRUM Model...5 TASKS 7 DEVICE VIEW 8 Interface Icons...9 Interface Icon Subviews Menu...10 Secondary Address Panel...11 DEVICE TOPOLOGY VIEWS 12 APPLICATION VIEWS 13 Main Application View...13 Application Icons...14 Supported Applications...14 Common Applications...14 Device Specific Applications...16 Checkpoint Application...16 Firewall Information View...16 General Information...16 Filter Information...17 Packet Information...17 RateShape Application RateShape Performance View Rule Status Table View Aggregation Class Status Table View Virtual Router Redundancy Protocol Application PERFORMANCE VIEWS 20 CONFIGURATION VIEWS 21 Device Configuration View IPSO Configuration View Config Log Table Card IPSO Additional Configuration View Image Fan Power RateShape Configuration View Aggregation Class Table View Rule Table View MODEL INFORMATION VIEWS 28 INDEX 29 Device Management Page 3 Nokia Firewall

4 Introduction This section introduces SPECTRUM Device Management documentation for the Nokia Firewall series of devices. This introduction contains the following topics: Purpose and Scope Required Reading Supported Devices (Page 5) The SPECTRUM Model (Page 5) Purpose and Scope Use this documentation as a guide for managing Nokia Firewall devices with the SPECTRUM management module SM-NOK1000. This documentation describes the icons, menus, and views that enable you to remotely monitor, configure, and troubleshoot Nokia Firewall devices through software models in your SPECTRUM database. This documentation consists primarily of information specific to the supported management module. For general information about device management using SPECTRUM, and for explanations of basic SPECTRUM functionality, refer to the documentation listed under Required Reading. Required Reading Before using this document, you should be familiar with the information provided in the following documentation: Getting Started with SPECTRUM for Operators Getting Started with SPECTRUM for Administrators How to Manage Your Network with SPECTRUM SPECTRUM Views SPECTRUM Icons SPECTRUM Menus Device Management Page 4 Nokia Firewall

5 Introduction Supported Devices SPECTRUM management module SM-NOK1000 allows you to model several different types of Nokia Firewall /VPN devices. These devices offer a combination of firewall and VPN technology on a Nokia platform with a security-specific operating system (IPSO). They allow organizations to deploy a single, integrated solution for secure Internet communications and access control. They are ideal for network environments from carrier class to the regional or small office The following Noika devices are supported by the SM-NOK1000 management module: IPUnkwn IP4xx IP400 IP410 IP440 IP6xx IP600 IP650 IP3xx IP110 IP530 IP740 IP3400 VPNUnkwn VPNRL50 VPNRL250 VPNRL500 VPNRLU VPN210 VPN220 VPN230 VPN240 The SPECTRUM Model Supported Devices SPECTRUM uses a single model type for modeling the supported Nokia Firewall devices. This model type is NokiaFW. This model is represented in SpectroGRAPH views by Device icons. As shown in Figure 1, the appearance of the Device icon varies depending on the view in which it appears. Device Management Page 5 Nokia Firewall

6 Introduction The SPECTRUM Model Figure 1: Device Icon Option Accesses the... Model Name XYZ_Mxxx Large Device icon appears in Device Topology, Location, and Device Interface views. Small Device icon appears in Topology and Application views Model Name IP440 DevTop Device Topology Views (Page 12) Application Application Views (Page 13) Configuration Configuration Views (Page 21) Model Information Primary Application Model Information Views (Page 28) Menu options that let you select either Gen Bridge App or MIB-II as the primary application. The device-specific Icon Subviews menu options available from the Device icon are listed below. Option Fault Management Accesses the... For further information refer to How to Manage Your Network with SPECTRUM documentation. Device Device View (Page 8) The rest of this document covering management module SM-NOK1000 is organized as follows: Tasks (Page 7) Device View (Page 8) Device Topology Views (Page 12) Application Views (Page 13) Performance Views (Page 20) Configuration Views (Page 21) Model Information Views (Page 28) Device Management Page 6 Nokia Firewall

7 Tasks This section contains an alphabetical list of device management tasks, with each task providing one or more links to views that let you perform the task. Application Information (examine) Application Views (Page 13) Device (configure) Configuration Views (Page 21) Device Performance (monitor) Device View (Page 8) File Transfer (initiate/examine) Firewall Information View (Page 16) Port Configuration (examine/modify) Interface Icons (Page 9) Device Configuration View (Page 21) Port Statistics (monitor) Performance Views (Page 20) RateShape Configuration (configure) RateShape Configuration View (Page 24) Interface Mask and Address (examine) Secondary Address Panel (Page 11) IPSO Configuration (configure) IPSO Configuration View (Page 22) Model Information (examine) Model Information Views (Page 28) Device Management Page 7 Nokia Firewall

8 Device View This section describes the Device view and subviews available for models of Nokia Firewall devices in SPECTRUM. Access: From the Icon Subviews menu for the Device icon, select Device. This view (Figure 2) uses icons and labels to represent the device and its components, such as modules, ports, and applications. The view provides dynamic configuration and performance information for each of the device s serial and network I/O ports, which are represented by Interface icons in the bottom panel of the view. The middle panel of the view displays a Device icon, which lets you monitor the device operation and access other device-specific views. Figure 2: Device View File View Tools Bookmarks Help Model Name Contact Description Location Model Name XYZ_Mxxx 1 ON Ethernet ei0 0:0:1D:F:FD:B6 5 ON SFTWARLPBK lo0 0:0:1D:F:FD:B6 2 ON ATM CPU 6 ON ATM port CPU.1 Network Address Primary Application Gen Bridge App Filter Physical Interface Description Device Icon 3 ON 4 ATM 7B2 7 ON ATM 7B3 Sys Up Time Manufacturer Device Type Serial Number Interface Options Panel ATM 8B3 ON 8 ON ATM 8B4 9 ON ATM8023 zn1 0:0:1D:F:FD:B6 512 ON AAL5 UAAL5 10 ON ATM 7A1 ON ATM 7B ON ATM 8B1 ON ATM 8B2 Interface Icons Model Name of type XYZ_Mxxx of Landscape node: Primary Device Management Page 8 Nokia Firewall

9 Device View Interface Icons Figure 3 shows a close-up of an Interface icon from the Device view. Most of the informational labels on the icon also provide double-click access to other views, as explained in the following label descriptions. Figure 3: a b c d e f a Interface Icon b 1 ON ethernet fxp0 0:0:1D:F:FD:B6 Interface Number Label IF Status Label Interface Type Label Network Type Label Physical Address Label IP Address Label c d e f Interface Icons Interface Number Label This label displays the interface (port) number. IF Status Label This label displays the current status of the interface for the primary application selected, e.g., Gen Rtr App or MIB-II App. Table 1 lists the possible label color representations. Note that the color of the label also depends on the interface s current Administrative Status, which you set in the Interface Configuration View. This view can be accessed by double-clicking the Interface Type label. Table 1: Color Interface Status Label Colors Operational Status Administrative Status Green up up ON Blue down down OFF Yellow down up OFF Label Text Red testing testing TEST Interface Type Label This label identifies the interface type (Ethernet, ATM, etc.). Double-click this label to access the Interface Configuration view. See the SPECTRUM Views documentation. Device Management Page 9 Nokia Firewall

10 Device View Network Type Label This label identifies the type of network to which the interface is connected. Double-click the label to open the Model Information view for the interface. Physical Address Label This label displays the physical (MAC) address of the interface. Double-click this label to open the Address Translation Table (AT). IP Address Label This label displays the IP address for the interface. Double-click this label to open the Secondary Address Panel (Page 11), which lets you change the address and mask for the interface. Interface Icon Subviews Menu Table 2 lists the device-specific interface Icon Subviews menu options and the views to which they provide access. Detail Table 2: Option IF Configuration Address Translation Table Secondary Address Panel Thresholds Model Information Trap Configuration Interface Icon Subviews Menu Interface Icon Subviews Menu Accesses the... Interface Detail view, which displays packet, error, and discard breakdown statistics for the interface. Interface Configuration view (see SPECTRUM Views). Interface Address Translation Table, which identifies the physical and network address for the interface. Secondary Address Panel (Page 11). Interface Threshold view, which lets you set the on/off alarm thresholds for load, packet rate, error rate, and % discarded for the interface. Model Information Views (Page 28). Interface Trap Configuration view (see How to Manage Your Network with SPECTRUM). Device Management Page 10 Nokia Firewall

11 Device View Secondary Address Panel Secondary Address Panel Access: From the Icon Subviews menu for the Interface icon in the Device view, select Secondary Address Panel. This panel provides a table of IP addresses and masks obtained from the Address Translation table within the device s firmware. You can change the current address displayed in the IP Address field by selecting an entry from the table in this panel and clicking the Update button. Device Management Page 11 Nokia Firewall

12 Device Topology Views This section describes the Device Topology view available for models of the Nokia Firewall devices. Access: From the Icon Subviews menu for the Device icon, select DevTop. The Device Topology view (Figure 4) shows the connections between a modeled device and other network entities. The lower panel of the view uses Interface icons to represent the device s serial, network, and I/O ports. These icons provide the same information and menu options as those in the Device View (Page 8). If a device is connected to a particular interface, a Device icon appears on the vertical bar above the Interface icon along with an icon representing the network group that contains the device. Refer to the SPECTRUM Views documentation for details on Device Topology view. Figure 4: Device Topology View SpectroGRAPH: Device Topology: Model Name File View Tools Bookmarks Help Graphic of Nokia Firewall Device Model Name XYZ_Mxxx 1 ON 2 ON 3 ON Ethernet ei0 0:0:1D:F:FD:B6 ATM A2 0:0:1D:F:FD:B6 ATM CPU 0:0:1D:F:FD:B6 Model Name of type Model Type of Landscape node: Primary Device Management Page 12 Nokia Firewall

13 Application Views This section describes the main Application view and the associated application-specific subviews available for models of Nokia Firewall devices. Access: From the Icon Subviews menu for the Device icon, select Application. Main Application View When a device model is created, SPECTRUM automatically creates models for each of the major and minor applications supported by the device. The main Application view identifies all of these application models, shows their current condition status, and provides access to application-specific subviews. Figure 5 shows this view in the Icon mode. If you prefer the List mode, which displays applications as text labels, select View > Mode > List. For more information on this view, refer to the MIBs and the Application View document. Figure 5: Application View SpectroGRAPH: Application: Model Name File View Tools Bookmarks Model Name Contact Description Location Network Address System Up Time Manufacturer Device Type Serial Number Model Name Model 6E132_25 Type Help Model Name of type <model type> of Landscape node: Primary Device Management Page 13 Nokia Firewall

14 Application Views Application Icons When the Application view is in Icon mode, each of the application models is represented by an Application icon (Figure 6). Double-clicking the Model Name label (a) at the top of the icon opens the associated Model Information view see Model Information Views (Page 28). For some applications, the Model Type label (c) at the bottom of the icon is also a double-click zone, which opens an application-specific view. Any views accessible through these double-click zones are also accessible from the Application icon s Icon Subviews menu. (b) (c) Figure 6: (a) Application Icon IP2_App IP2_App Supported Applications Application Icons SPECTRUM s applications can be grouped within two general categories as follows: Applications associated with non proprietary MIBs. See Common Applications below. Applications associated with device-specific MIBs. See Device Specific Applications (Page 16). Common Applications For the most part, these applications represent the non proprietary MIBs supported by your device. Listed below (beneath the title of the SPECTRUM document that describes them) are some of the common applications currently supported by SPECTRUM. Nokia Firewall devices support both common and device-specific applications. Note: The documents listed below (in bold font) are available for viewing at: a b c Model Name Label / Model Information View Condition Status Label Model Type Label / Application-Specific View Routing Applications - Generic Routing - Repeater Device Management Page 14 Nokia Firewall

15 Application Views - AppleTalk - DECnet - OSPF - OSPF2 - BGP4 - VRRP - RFC 2932 Bridging Applications - Ethernet Special Database - Spanning Tree - Static - Transparent - PPP Bridging - Source Routing - Translation - QBridge MIB II Applications - SNMP - IP - ICMP - TCP - System2 - UDP Transmission Applications - FDDI - Point to Point - DS1 - DS3 - RS WAN - Frame Relay - Token Ring - Ethernet - Fast Ethernet - RFC 1317App - RFC 1285App - RFC 1315App App - SONET Technology Applications - APPN - ATM Client - DHCP - DLSw - PNNI - RFC 1316App - RFC RFC RFC RFC 2925 DOCSIS Applications - DOCSISCblDvApp - DOCSISQOSApp Supported Applications Device Management Page 15 Nokia Firewall

16 Application Views - DOCSISBPI2App - DOCSISBPIApp - DOCSISIFApp Digital Subscriber Line (DSL) Applications - ADSL Device Specific Applications The views and subviews available for Nokia Firewall device-specific applications are described in the rest of this section. Checkpoint Application RateShape Application (Page 17) Virtual Router Redundancy Protocol Application (Page 19) Checkpoint Application This major application (model type CheckpointApp) provides access to the following application-specific subview: Firewall Information View Model Information Views (Page 28) Checkpoint Application Firewall Information View Access: From the Icon Subview menu for the CheckpointApp application, select Firewall. This view provides fields in the following areas: General Information Filter Information (Page 17) Packet Information (Page 17) General Information This area of the Firewall Information view provides the following information: Product Type of Firewall. Module State The state of the module. Last SNMP FW Event The last SNMP trap sent via fw. Major Version The major Firewall version. Minor Version The minor Firewall version. Device Management Page 16 Nokia Firewall

17 Application Views Filter Information This area of the Firewall Information view provides the following information: Name The name of the loaded filter. Date The date the filter was installed. Packet Information This area of the Firewall Information view provides the following information: Accepted Packets The number of accepted packets Rejected Packets The number of rejected packets. Dropped Packets The number of dropped packets. Logged Packets The number of logged packets. RateShape Application RateShape Application This major application (model type NkIpsoRateApp) provides access to the following application-specific subviews: IPSO Configuration View (Page 22) RateShape Configuration View (Page 24) RateShape Performance View RateShape Performance View Access: From the Icon Subviews menu for the NkIpsoRateApp application, select RateShape Performance. This view displays the Access List Status Table which provides the following information: ifindex Identifies the MIB-II interface which this access list stat entry is responsible for. Index A unique value identifying this table entry. Direction The data source for this access list. Pkts Passed Number of packets successfully exiting this access list. Device Management Page 17 Nokia Firewall

18 Application Views Bytes Passed Number of bytes successfully exiting this access list. Rules Clicking this button opens the Rule Status Table View. Aggregation Class Clicking this button opens the Aggregation Class Status Table View (Page 18). Rule Status Table View Access: From the RateShape Performance view, click the Rules button. This view provides the following information: ifindex A unique value corresponding to the interface to which this rule is applied. Index The rsruleindex value of the rule this entry describes. Direction The data source for this rule. RateShape Application Drop Pkts The number of packets that exceeded this rate limit. Drop Octets The number of bytes that exceeded this rate limit. Pkts Passed Number of packets successfully exiting this rule. Bytes Passed Number of bytes successfully exiting this rule. Aggregation Class Status Table View Access: From the RateShape Performance view, click the Aggregation Class button. This view provides the following information: ifindex The value of ifindex which corresponds to the interface for which this aggregation class handles tokens. Index A unique value identifying this entry in the table. Direction The data source for this aggregation class. Shaped Pkts The number of packets shaped by this rate limit. Device Management Page 18 Nokia Firewall

19 Application Views Shaped Octets The number of octets shaped by this rate limit. Enqueued Pkts The number of packets enqueued by this rate limit. Enqueued Octets The number of packets enqueued by this rate limit. Dropped Pkts The number of packets which exceeded this rate limit. Dropped Octets The number of octets which exceeded this rate limit. Pkts Passed In The number of packets passed in successfully exiting this aggregation class. Pkts Passed Out The number of packets passed out successfully exiting this aggregation class. Bytes Passed In The number of bytes passed in successfully exiting this aggregation class. Virtual Router Redundancy Protocol Application Bytes Passed Out The number of bytes passed out successfully exiting this aggregation class. Virtual Router Redundancy Protocol Application The Virtual Router Redundancy Protocol (VRRP) application (model type rfc2338app) provides access to the VRRP Configuration View. See Routing Applications for documentation. Device Management Page 19 Nokia Firewall

20 Performance Views This section introduces the Performance view. For details concerning this view, refer to the SPECTRUM Views documentation. Performance views display performance statistics in terms of a set of transmission attributes, e.g., cell rates, frame rates, % error, etc. A typical view is shown in Figure 7. The instantaneous condition of each transmission attribute is recorded in a graph. The statistical information for each attribute is presented in the adjacent table. Figure 7: Performance View SpectroGRAPH: Type Routing File View Tools Bookmarks Network Address Device Type Performance View Generally, you determine performance at the device level through Performance views accessed from the Device and Application icons. You determine performance at the port/interface level through Performance views accessed from Interface icons. Day/Month/ Time/ Year :30 00:20 00:10 0 * Graph X 1000 Log Value Average Peak Value * Frame/Sec at % Received at % Forwarded at % Trans at % Error at % Discarded at % Discarded Graph Properties Scroll to Date-Time Detail type routing of type IP Routing of Landscape node: Primary Device Management Page 20 Nokia Firewall

21 Configuration Views This section describes the Configuration views available for models of Nokia Firewall devices in SPECTRUM. Configuration views allow you to view and modify current settings for the modeled device and its interfaces, ports, and applications. The following Configuration views are available for models of Nokia Firewall devices: Device Configuration View IPSO Configuration View (Page 22) RateShape Configuration View (Page 24) Device Configuration View Access: From the Icon Subviews menu for the Device icon, select Configuration. A typical Device Configuration view is shown in Figure 8. Generally, this view includes a few fields that display device information as well as an Interface Configuration Table that lists interface parameters, some of which can be changed (see SPECTRUM Views). Some Device Configuration views include one or more buttons that provide access to device-specific configuration information. These are described below. Model Name Figure 8: File View Tools Bookmarks Description Location Contact Status Device Configuration View p Contact Manufacturer Sys Up Time Configuration View Redundancy and Model Reconfiguration Options Sort Find Update Net Address Device Type Serial Number Number of Interfaces Interface Configuration Table Help Interface Address Translation Index Description Type Bandwidth Physical Addre Device Management Page 21 Nokia Firewall

22 Configuration Views Redundancy and Model Reconfiguration Options Refer to the SPECTRUM Views documentation Interface Address Translation Refer to the SPECTRUM Views documentation. IPSO Configuration View Access: From the Icon Subviews menu for the NkIpsoRateApp application, select Configuration. This view provides the fields described below and contains other fields in the following areas: Config Log Table (Page 23) Card (Page 23) Serial Number The serial number of this device. Memory (MB) The total memory capacity, in megabytes. Log Size A maximum limit on the number of entries which may be recorded in the Log Table. MB Type The type of motherboard populating this device. IPSO Configuration View MB Rev Number A string value representing the type of motherboard populating this device. MB Serial Number The serial number of the motherboard. Additional Configuration Clicking this button opens the IPSO Additional Configuration View (Page 23). Config This area of the IPSO Configuration View provides the following information: Index The index for this configuration, with 1 representing the currently running database and traversing from newest to oldest. File Path The absolute pathname and filename that holds a record of this configuration. Date/Time The date and time this file was last changed. Device Management Page 22 Nokia Firewall

23 Configuration Views Log Table This area of the IPSO Configuration View provides the following information: Index The unique index of this configuration change entry. Description A description of the nature of the configuration change. Card This area of the IPSO Configuration View provides the following information: Index The number of the slot in which this card is plugged. Status The operational status of this card. Possible values are: enabled or disabled. Type The iftype value for any interface(s) on this card. Please refer to RFC1213. IPSO Additional Configuration View IPSO Additional Configuration View Access: From the IPSO Configuration View, click the Additional Configuration button. This view provides fields in the following areas: Image Fan (Page 24) Power (Page 24) Image This area of the IPSO Additional Configuration View provides the following information on resident kernel images on this system: Index A unique value for the image represented by this entry. Version No. The version number of this image. Serial No. The serial number of this image. Time of Load The date and time when this image was first transferred onto this device. Device Management Page 23 Nokia Firewall

24 Configuration Views Fan This area of the IPSO Additional Configuration View provides the following information: Index A unique value representing this particular fan. Status The operational status of this fan. Possible values are: running and notrunning. Power This area of the IPSO Additional Configuration View provides the following information: Index A unique value representing this power supply. Temperature An indication of whether or not this power supply s internal temperature is over the recommended operation temperature limit. Possible values are: normal and overtemperature. Oper Status The operational status of this power supply. Possible values are: running and notrunning. RateShape Configuration View RateShape Configuration View Access: From the Icon Subviews menu for the NkIpsoRateApp application, select RateShape Config. This view displays the Access List table which provides the following information: ifindex The ifindex of the MIB-II interface for which this access list entry is responsible. Index A unique value identifying this Access List. Direction The data source for this access list. Name A unique descriptor for this access list. Row Status The current status of this access list. Possible values are: active, notinservice, notready, createandgo, createandwait, and destroy. Add New Access List Clicking on this button opens the Access List Add View, which enables you to create an Access List within the Access List Table by entering an instance and then selecting its desired status. Device Management Page 24 Nokia Firewall

25 Configuration Views Aggregation Class Clicking this button opens the Aggregation Class Table View. Rules Clicking this button opens the Rule Table View (Page 26). Aggregation Class Table View Access: From the RateShape Configuration view click on the Aggregation Class button. This view provides the following information: ifindex The value of ifindex which corresponds to the first interface for which this aggregation class handles tokens. Index The unique value identifying this aggregation class (queue). Direction The data source for this aggregation class. Name A description of this aggregation class. RateShape Configuration View Mean Rate The peak bandwidth when Burst Rate and Burst Duration are not set. When mean rate and burst duration are set, the mean rate specifies the longterm rate which the packet stream will be shaped to, but the packet stream can burst above that rate, with no penalty, for as long as the burst duration specifies. Burst Rate The maximum burst peak rate in kilobits per second before being shaped. This value is obsolete and will no longer be supported. Burst Duration The number of milliseconds this aggregation class needs to transmit Burst Rate. If this is not set to a non-zero value, Mean Rate is the peak rate. Row Status The current status of this aggregation class. Possible values are: active, notinservice, notready, createandgo, createandwait, and destroy. Device Management Page 25 Nokia Firewall

26 Configuration Views Rule Table View Access: From the RateShape Configuration view click on the Rules button. This view provides the following information: ifindex The ifindex of the MIB-II interface for which this access list entry is responsible. Index An arbitrary value for rate limit objects. Direction The data source for the Rate Limit object. TOS The TOS field of the type of packet which this rule governs. Action The forwarding Action associated with this rule. Possible values are: drop, accept, reject, condition, and skip. Src Addr The source IP address for this rule. Src Addr Mask The mask of source address for this rule. Dest Addr The destination IP address for this rule. RateShape Configuration View Dest Addr Mask The mask of destination address for this rule. Protocol The number of IP protocol that rule applies on. Src Start Port The start of the source range of port number(s) of the IP protocol for this rule. Src End Port The end of the source range of port number(s) of the IP protocol for this rule. Dest Start Port The start of the destination range of port number(s) of the IP protocol for this rule. Dest End Port The end of the destination range of port number(s) of the IP protocol for this rule. Agg Class Index The index to the aggregation class (queue) if the value of Action is enqueue. Established Indicates whether this rule is effective on previously-established TCP connections. Device Management Page 26 Nokia Firewall

27 Configuration Views RateShape Configuration View Row Status The current status of this rule. Possible values are: active, notinservice, notready, createandgo, createandwait, and destroy. Device Management Page 27 Nokia Firewall

28 Model Information Views This section provides a brief overview of the Model Information view. Model Information views display administrative information about devices and their applications and let you set thresholds and alarm severity for the devices. Figure 9 shows a sample Model Information view. The layout of this view is the same for all model types in SPECTRUM but some information will vary depending on the model it defines. Refer to the SPECTRUM Views documentation for a complete description of this view. Model Name Description Location Figure 9: Model Information View SpectroGRAPH: Model Name File View Tools Bookmarks MM Name MM Part Number MM Version Number Model Type Model Creation Time Model Created By Model State Security String DCM TimeOut DCM Retry Contact Manufacturer SysUpTime Model Information View Communication Information Net Address Device Type Serial Number General Information Condition Condition Value Contact Status Lost Child Count Value When Yellow Value When Orange Value When Red Community Name Mgnmt Protocol Help Poll Interval Poll Status Log Ratio Last Successful Poll True Poll / Log Information Logged Polled Device Management Page 28 Nokia Firewall

29 Index A Address Interface IP 10 Physical (MAC) 10 Translation 11 Admin Status 9 Aggregation Class Status Table View 18 Bytes Passed In 19 Bytes Passed Out 19 Direction 18 Dropped Octets 19 Dropped Pkts 19 Enqueued Octets 19 Enqueued Pkts 19 ifindex 18 Index 18 Pkts Passed In 19 Pkts Passed Out 19 Shaped Octets 19 Shaped Pkts 18 Aggregation Class Table View 28 Burst Duration 25 Burst Rate 25 Direction 25 ifindex 25 Index 25 Mean Rate 25 Name 25 Row Status 25 Application Device-specific 16 Application Icons 14 Application View 13 C Checkpoint Application 16 Condition Status Label 14 Configuration views 21 D Device icon 5 Device Topology Views 12 F File Transfer MIB View 16 Firewall Information View Accepted Packets 17 Date 17 Dropped Packets 17 Filter Information 17 General Information 16 Last SNMP FW Event 16 Logged Packets 17 Major Version 16 Minor Version 16 Module State 16 Name 17 Packet Information 17 Product 16 Rejected Packets 17 Firewall InformationView 16 I Icons Device 5 Interface 9 Image 23 Interface Type, Device 9 IPSO Additional Configuration View 23 Fan 24 Index 24 Status 24 Device Management Page 29 Nokia Firewall

30 Index Image 23 Index 23 Serial No. 23 Time of Load 23 Version No. 23 Power 24 Index 24 Oper Status 24 Temperature 24 IPSO Configuration View button Additional Configuration 22 Card 23 Config Date/Time 22 File Path 22 Index 22 Log Size 22 Log Table 23 Description 23 Index 23 MB Rev Number 22 MB Serial Number 22 MB Type 22 Status 23 Type 23 L Labels M Application Icon Condition Status 14 Model Name 14 Model Type 14 Mask 11 Model type 5 Model Type Label 14 N Network I/O ports 12 Network Type 10 P Performance Statistics 20 Port Number, Device 9 R RateShape Application 17 RateShape Configuration View 24 button Add New Access List 24 Aggregation Class 25 Index Rules 25 Direction 24 ifindex 24 Index 24 Name 24 Row Status 24 RateShape Performance View 17 button Aggregation Class 18 Rules 18 Bytes Passed 18 Direction 17 ifindex 17 Index 17 Pkts Passed 17 Row 24 Rule Status Table View 18 Bytes Passed 18 Direction 18 Drop Octets 18 Drop Pkts 18 ifindex 18 Index 18 Rule Table View 26 Action 26 Agg Class Index 26 Dest Addr 26 Dest Addr Mask 26 Dest End Port 26 Dest Start Port 26 Direction 26 Established 26 Device Management Page 30 Nokia Firewall

31 Index Index ifindex 26 Index 26 Protocol 26 Row Status 27 Src Addr 26 Src Addr Mask 26 Src End Port 26 Src Start Port 26 TOS 26 S Serial ports 12 T Tasks 7 Threshold Information 10 V Views Configuration 21 Virtual Router Redundancy Protocol (VRRP) Application 19 Device Management Page 31 Nokia Firewall