Nokia IP 2250 Firewall

Home > Products > Nokia > IP2250

Nokia IP2250 Security For Distributed Enterprises

The Nokia IP2250, a diskless network processor-based platform, supports the highest levels of traffic found in multi-faceted network infrastructures within the largest enterprise, service provider and data center sites.

Nokia IP2250 Security For Distributed Enterprises

The Nokia family of IP Security Platforms expands from the data center to the remote office and beyond. The following platforms are designed specifically for corporations with small, remote or branch offices.

The Nokia IP 2250 Firewall is designed for:

Enterprise customers
Service providers
High volume commercial websites
Network core and data-center security

Nokia IP-2250 Information

Nokia IP2250 provides resilient high performance for the most demanding perimeter and internal security locations. It features excellent expansion capabilities to ensure low Total Cost of Ownership. And high availability features such as support for IP Clustering, VRRP, and built-in hardware features deliver maximum performance and network availability.

Nokia IP2250 is a flash-memory based Network Processor (NP) platform with unique "Accelerated Data Path" (ADP) technology. With its flash-based hardware, ADP technology and Nokia IPSO secure operating system it accelerates critical IP traffic and connection setup, increases the connection rate and improves throughput.

Nokia IP2250 features Web-based Nokia Network Voyager and a complete Command Line Interface (CLI) for single device management, and Nokia Horizon Manager for companies who need to manage multiple Nokia devices.

Nokia IP2250 is backed by Nokia's world-class First Call - Final Resolution global support and services.

Features of the Nokia IP 2250

Industry leading firewall price/performance
Maximum expansion capacity with up to 36 10/100 Ethernet ports or four 10/100 Ethernet
ports and eight Gigabit Ethernet ports
Industry-proven hardened Nokia IPSO operating system with its Web and CLI interface
Field-proven Nokia dynamic unicast and multicast routing protocols
High Availability via either Nokia VRRP or IP Clustering
Load sharing dual power supplies and fans highly flash-based memory
2GB of RAM
Optional high-speed VPN encryption acceleration card
Hot swap interface cards
Can be managed with the Web-based Network Voyager and CLI for single device management single device management and
Nokia Horizon Manager for companies
with multi-device management

Key Benefits

Industry leading price/performance
Seamless network integration
Excellent manageability
Simplified high availability management
Meets maximum customer uptime requirements
World-class customer service and support

Available Software

Check Point VPN -1 Pro

Nokia IP 2250 Specifications

Internet Protocols

IP RFC 791
ICMP RFC 792
ARP RFC 826
ICMP Router Discovery
(Server) RFC 1256
CIDR RFC 1519
Static Routes
RIP RFC 1058
RIP Version 2 (With
authentication) RFC 1723
OSPF RFC 2328
DVMRP (multicast) RFC 1075
IGMP (multicast) RFC 2236
PIM-DM (multicast), PIM-SM
Multicast Tunnels
IGRP (optional) Cisco
BGP4 (optional) RFC 1771
IPv6 core RFCs
Requirements for IPv4
Routers RFC 1812
Differentiated Services
(EF) RFC 2598
Bootp/DHCP Relay RFC 2131
Route Aggregation & Redistribution
Un-numbered Interfaces

LAN Support

10/100 Mbps Ethernet
1000 Base Multi-mode fiber
(MMF) LC connector
1000 BaseT
(10/100/1000 Mbps)

WAN Support

PPP RFC 1661, 1662
Frame Relay FRF.1, RFC 1490
HDLC Cisco

Performance

Firewall forwarding (7.5 Gbps)
VPN forwarding (1.8 Gbps)
FW Connections Per Second (47k CPS)

Management

SNMP RFC 1157, SNMPv2c
Telnet RFC 854
FTP RFC 959
SSHv2 (secure Telnet & FTP)
HTTP Server RFC 2068
SSL/TLS RFC 2246
Command line utilities
Supported in Nokia Horizon Manager

Application Acceleration

VPN (requires optional card)
Accelerated Data Path (ADP)

Environment

Temperature: 5ºC to 40ºC
Humidity: 10% - 90%
(non-condensing)
Altitude: 10,000 ft.

High Availability

VRRP RFC 2338
FireWall-1 State Sync

Security

Secure Administrative Access
Read/Write and Read-Only
Access Modes
SSH (secure Telnet & FTP)
SSL/TLS (secure HTTP) RFC 2246
S/Key (one-time password)
RFC 1760
Access Control Lists
Traffic Management
MD5 Routing
Authentication (RIPv2)
RFC 1723
Centralized Authentication
Native IPSec (for non-firewall applications)
DNS Client, NTP Client and Server
RADIUS Client, TACACS+ Client

System Indicators

Integrated 10/100 Ethernet port status
Power status on system
Failure status on system
Port status on networkinterface cards

Supported Standards

IPSec (RFCs 2401-2411, 2451)
GRE (RFCs 1701 & 1702)
Generic Routing Encapsulation
Designed to meet NEBS III,
and FIPS 140-2 (kit required)

Safety

UL1950, CAN/CSA 22.2, No. 950-
M95, (CE Mark) EN60950:1992,
A1, A2:1993, A3:1995, A4:1997,
A11:1998 with Japanese
National Deviations Emission Compliance

Emission Compliance