Nortel Networks NN46120-104 User Manual

Page 156

156

Troubleshooting the NVG

Step

Action

In this step it is important that you connect to the particular ASA
310-FIPS that you want to delete from the cluster. To do that,
you can use either a console connection, or a remote connection
(through Telnet or SSH) using the IP address assigned to
the specific ASA 310-FIPS device. Do not connect through a
remote connection using the Management IP (MIP) address of
the ASA cluster. To view the IP addresses assigned to each
ASA 310-FIPS device in the cluster, use the

/info/isdlist

command.

Password:

Alteon iSD SSL

Software version 7.1

Delete the ASA 310-FIPS (iSD) and choose to reset the HSM
cards.

>> Main# /boot/delete

Are you sure you want delete the iSD? (y/n) y

Do you want to clear the HSM card(s) as well?

(y/n) [y]:

(press ENTER to accept resetting the HSM cards)

Insert the HSM-SO iKey associated with HSM card 0 in the
card with flashing LED and provide the correct password.

Remember that each HSM card requires inserting the specific
HSM-SO iKey that was used when initializing that particular HSM
card. This holds true even if you use the same password for both
HSM-SO iKeys that are used on one ASA 310-FIPS device.

(continued)

Verify that HSM-SO iKey (purple) is inserted in card 0

(with flashing LED).

Hit enter when done.

Enter the current HSM-SO password for card 0:

Insert the HSM-SO iKey associated with HSM card 1 in the
card with flashing LED and provide the correct password.

Again, make sure that you insert the correct HSM-SO iKey, as
each HSM card requires the specific iKey that was used when
the card was first initialized.

Nortel VPN Gateway

User Guide

NN46120-104

02.01

Standard

14 April 2008