beautypg.com

Nortel Networks NN46120-104 User Manual

Page 68

background image

68

Initial Setup

(

join

setup, continued)

Verify that CODE-SO iKey (black) is inserted in card 1

(with flashing LED).

you used in

Step 5

>

Hit enter when done.

Verify that HSM-USER iKey (blue) is inserted in card 1

(with flashing LED).

Hit enter when done.

Verify that CODE-USER iKey (black) is inserted in card

1 (with flashing LED).

that you used in

Step 5

>

Hit enter when done.

Wrap key successfully combined to card 1.

7

If you selected FIPS mode when installing the first ASA
310-FIPS in the cluster, provide the correct passphrase.

If you selected FIPS mode when installing the first ASA
310-FIPS in the cluster, you will also be asked to provide the
passphrase you defined at that time. If you selected Extended
Security mode, this step will not appear.

(

join

setup, continued)

Enter the secret passphrase (as given during

initialization of the first iSD in the cluster):

8

Wait until the Setup utility has finished.

(

join

setup, continued)

Setup successful.

login:

The setup utility is now finished. The ASA 310-FIPS that
has now been added to the cluster will automatically pick up
all configuration data from one of the already installed ASA
310-FIPS units in the cluster. After a short while you will get a
login prompt.

Note: After successfully having initialized the HSM cards,
you are automatically logged in to each HSM card as USER.
You can verify the current HSM card login status by using the

/info/hsm

command. After a reboot has occurred (whether

intentionally invoked, or due to a power failure), you must
manually log in to the HSM cards for the ASA 310-FIPS
device to resume normal operations. For more information
about logging in to the HSM cards after a reboot, see

“An ASA

310-FIPS Stops Processing Traffic” (page 153)

.

Nortel VPN Gateway

User Guide

NN46120-104

02.01

Standard

14 April 2008

Copyright © 2007-2008 Nortel Networks

.