Complete initial setup configuration

Where to go next

1. After you power on the device, follow the prompts provided onyour terminal to set up basic device configuration, including
your super user account name and password.
2. If you have not done so, use a network cable to connect themanagement port to the management network.
3. From an SSH terminal, ping the device management IP
address to verify connectivity.
4. Connect to the device:a. From an SSH terminal, connect to the device and log inthrough the CLI with the super username and password.
See the TippingPoint IPS Command Line Interface
Reference.
b. To log in to the device from the Local Security Manager(LSM), enter the IP address or hostname of your IPS
device in your browser address bar. For example:
https://123.45.67.89.

After you complete the setup, the device will pass traffic using thedefault filter configuration. The default configuration automaticallyrecognizes and blocks traffic that is known to be malicious at all
times, under all conditions, in all network environments. You canperform additional configuration, administrative, and managementtasks using either of the following methods:••

From the LSM, you can perform further configuration,administrative, and management tasks. For details, see theTippingPoint IPS Local Security Manager User Guide.
From the CLI, you can run the setup steps again by using thesetup command. This command provides additional
configuration options. You can also use other CLI commands
to manage the device. For details, see the TippingPoint IPS
Command Line Interface Reference.

NOTE: When you use the command line interface, configure theterminal emulation package to transmit a Ctrl-H character whenthe Backspace key is pressed.

Install your security device
Use these instructions to set up the Intrusion Prevention System (IPS) NX-Platform device.

Before You Begin•

Review your product release notes on the TippingPoint online Threat Management Center (TMC) at

https://tmc.tippingpoint.com for any late-breaking changes to the installation instructions.
••

Follow all safety information that shipped with your IPS.
Make sure the power capacity meets the following requirements:• AC: Voltage 100 – 240; Current 12 – 6; Frequency 50/60 Hz• DC: Voltage -40 to -60; Current 24 – 16; SELV

TippingPoint Online Threat Management CenterIf you will manage the device by using the Security Management
System (SMS), refer to the TippingPoint Security Management
System User Guide.

TippingPoint product documentation is available on the TMC at https://tmc.tippingpoint.com.

Overview
The NX-Platform device ships with the following components:
••
•
•
•

Device chassis
Two hot-swappable, redundant power supply modules
Five hot-swappable, redundant fan modules
Two AC power cables, one for each hot-swappable power supply
Null modem cable for the console port

The I/O modules are ordered separately.
1234© 2016 Trend Micro Incorporated. All rights reserved.
Trend Micro Company makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability
and fitness for a particular purpose. Trend Micro shall not be liable for errors contained herein or for incidental or consequential damages in connection
with the furnishing, performance, or use of this material.
This document contains proprietary information, which is protected by copyright. No part of this document may be photocopied, reproduced, or translated
into another language without the prior written consent of Trend Micro. The information is provided “as is” without warranty of any kind and is subject tochange without notice. The only warranties for Trend Micro products and services are set forth in the express warranty statements accompanying suchproducts and services. Nothing herein should be construed as constituting an additional warranty. Trend Micro shall not be liable for technical or editorial
errors or omissions contained herein.
TippingPoint, the TippingPoint logo, and Digital Vaccine are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/orproduct names may be trademarks or registered trademarks of their respective owners. This document contains confidential information, trade secrets orboth, which are the property of Trend Micro. No part of this documentation may be reproduced in any form or by any means or used to make any
derivative work (such as translation, transformation, or adaptation) without written permission from Trend Micro or one of its subsidiaries.
A3 Edition, October 2016

Publication Part Number: 5200-0543

5678910 11Figure 1-1 NX-Platform Device - Front Panel, Modules Installed1

TippingPoint 6-Segment Gig-T I/O Module

7

Bypass LED

2

TippingPoint 6-Segment GbE SFP I/O Module

8

System Health LED

3

TippingPoint 4-Segment 10GbE SFP+ I/O Module

9

CFAST Card

4

TippingPoint 1-Segment 40 GbE QSPF+ I/O Module

10 Console Port (top) and Management Port (bottom)

5

Stack Master LED

11 Power Button

6

Stack LED

*5200-0543*
5200-0543

Install your security device Rev A3*5200-0543*
5200-0543

Install your security device Rev A3

Install the device

Insert the CFast card

Refer to the diagram on the front page when you install theNX-Platform device.

Your TippingPoint NX-Platform device comes with a CFast card
included in the accessory kit. This pre-formatted, hot-swappablecard can store system logs, snapshots, and other system data.

NOTE: The device weighs 42 pounds (19.05 kilograms).
TippingPoint recommends that the device be lifted by two people.

Determine total rack space
Before you install the chassis, determine the total rack space thatis required to install your system. The required rack space will
increase if you plan to install multiple systems. The NX-Platform
device fits in either a 19-inch or a 23-inch wide rack.

Attach the device to the rack
The NX-Platform device ships with a slide rail kit to mount thedevice to the rack. Slide rail kits are also available to orderseparately. Refer to the instructions in the slide rail kit for
information about installing the slide rails.
If you are bolting the device to the rack, follow these guidelines.
For other rack-mounting options, refer to your device installationand safety guide.
WARNING! To prevent bodily injury when mounting or servicing
this unit in a rack, you must take special precautions to ensurethat the system remains stable.
•••

If the rack comes with stabilizers, install the stabilizers before
mounting or servicing the unit in the rack.
If the rack is partially filled, load the rack from the bottom tothe top with the heaviest component at the bottom of the rack.
If you plan to expand your system to include additional
TippingPoint systems in the future, allow space in the rack foradditions. During the initial installation, keep in mind theweight distribution and stability of the rack.

1. Locate the CFast card in the accessory kit.
2. Insert the card into its slot (9 in Figure 1-1).
3. If the device has been set to require authentication for
external storage cards, complete the mounting process using
the command line interface (CLI). For a list of CLI commands
used to manage the CFast card, refer to your device
installation and safety guide.

The NX-Platform device supports the following optical transceiver
I/O modules and bypass I/O modules for fiber and copper
components. Using other vendor devices could be detrimental toproper operation of the TippingPoint system.
The following standard I/O modules are supported for theNX-Platform device and are hot-swappable:••••

TippingPoint 6-Segment Gig-T I/O Module
TippingPoint 6-Segment GbE SFP I/O Module
TippingPoint 4-Segment 10GbE SFP+ I/O Module
TippingPoint 1-Segment 40GbE QSPF+ I/O ModuleTo attach the Management Processor connection
1. Connect one end of the Category 5 Ethernet cable to the port
labeled MGMT located on the front panel.
2. Connect the other end of the Ethernet cable to your network.
This enables remote management.

To attach network connections
1. Attach the cable for incoming traffic to the A port on thesegment.
2. Attach the cable for outgoing traffic to the B port on thesegment.
3. Connect the cables to the appropriate ports on your networkrouter.

Add I/O modules
Figure 1-3 Removing a blank module
To insert an I/O module, slide the module into the empty module
slot. When the module is in the correct position, the slide latch willautomatically slide into position.
WARNING! Do not leave slots empty for an extended period oftime. Insertion of a blank module or I/O Module ensures that theNX device is correctly cooled.

For more information about NX-Platform device configuration andnetwork connections, refer to the TippingPoint Local Security
Manager User Guide.

Check LEDs
When you connect power to the NX-Platform device, the systemcompletes a series of component checks. It then displays LEDs toshow the status of each component.

Chassis LEDs•

The following bypass I/O modules are supported for theNX-Platform device and are hot-swappable:•••

TippingPoint 4-Segment Gig-T Bypass module
TippingPoint 2-Segment 1G Fiber SR or LR Bypass module
TippingPoint 2-Segment 10G Fiber SR or LR Bypass module•For more information on these supported I/O modules, refer toyour device installation and safety guide.

•The device comes with blank modules inserted into module slots.
Figure 1-4 Inserting an I/O module

Attach cables
During setup, you will use the management processor connectionor the console port to access the configuration steps from yourterminal.

Connect the power supply
After you have bolted the device to the rack, attach the power
supply AC connections. To turn the power on, use the powerswitch located on the front panel of the device.
The NX-Platform device comes with a power cord retention
bracket and a cable management assembly. For instructions on
installing these accessories, refer to your device installation andsafety guide.

To remove the blank module, slide the slide latch (1) to the rightand pull on the handle (2 on left module) or grab point (2 on rightmodule).

To attach the Console port connection

Figure 1-2 Blank module

1. Connect the RJ-45 null modem cable to the Console port on
the unit.
2. Connect the other end of your cable (standard-sized femaleDB-9 connector) to your VT100-compatible terminal or yourcomputer.

Module LEDs•••

Use the following terminal settings for the Console port:•••••

Install your security device Rev A3

Baud rate: 115.2 Kbps
Character size: 8 bits
Parity: None
Stop Bits: One
Flow Control: None

Management Port.
• Link LED. Green indicates that the port is linked and readyfor data.
• Activity LED. Blinking Amber indicates the port is passingdata.
Bypass• Off: the system is not in L2FB.
• Red: the system is in L2FB
System Health:• Blinking green: the system is booting up, and is
not yet ready to inspect traffic.
• Solid green: system health is OK.
• Red: the system is experiencing a health alert.

•Copper Ports.
• Link LED. Green — Port is linked and ready for data.
• Activity LED. Blinking Amber — Port is passing data.
Fiber Ports.
• Link LED. Green — Port is linked and ready for data.
• Activity LED. Amber — Port is passing data.
Module Health:• Green: The module is configured, in service,
and in good health.
• Blinking amber: Module is inserted and powered up, but is
not yet recognized by the software.
• Solid amber: The module is experiencing a fault.
Bypass• Off: The module is in bypass.
• Green: Module in normal mode (not in bypass).

Install your security device Rev A3