Manuals / Intel / TV and Video / TV Mount

Intel A31032-001 manual

Models: A31032-001

1 196

Download 196 pages 18.6 Kb

Page 16

C H A P T E R 1 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide

Notes

1-6

Image 16

Intel A31032-001 manual

Contents

Intel NetStructure 7110/7115 e-Commerce Accelerator VersionCopyright TrademarksTable of Contents Theory of Operation Scenarios Remote Management Alarms and Monitoring Troubleshooting Appendix a Front Panel List of Figures Xii Introduction About this User GuideNew in This Release Remote ManagementWho Should Use this Book Before You BeginHow to Use this Book Glossary defines terms appearing in this User Guide Page Installation and Initial Configuration Installing the 7110/7115 Free- Standing or in a Rack Rack InstallationFree-Standing Installation Network ConnectionsAdmin Terminal Connection Status CheckNetwork and Server LEDs Inline LEDHyperTerminal§ Paste Operations Continuing Configuration TroubleshootingServer and Network LEDs Security Theory of OperationSingle Server Acceleration 7110/7115 in Single Server Configuration Multiple ServersWorking with Internet Traffic Management ITM Devices Positioning 7110/7115 between ITM Device and Client NetworkScalability and Cascading Positioning 7110/7115 between ITM Device and ServerSpilling and Throttling Keys and Certificates AvailabilityCutting and Pasting with HyperTerminal§ Procedure Create a key Type the create key command at the promptCreate a Certificate Signing Request Intel 7115 create signIntel 7115 export sign mywebserver Certificate REQUEST----- linesAsciix Enter Typically, the CSR will look something like this EnterExporting a Key/Certificate from a Server Save the configuration when the server has been mappedApache Interface to Open SSL§ modssl Apache SSL§ Importing into the 7110/7115 Stronghold§Intel 7115 import key mywebserver Save the configuration when the server has been mapped Enter the create cert command with the keyID Creating a new Key/Certificate on the 7110/7115Create a key as follows Intel 7115 create cert mywebserverGlobal Site Certificates OverviewExample Global Site Certificate Paste ProcedureIntel 7115 import cert keyID A P T E R Redirection Clients and Unsupported Ciphers Intel 7115 set redirectClient Authentication To disable a redirect URL for a mappingIntel 7115 show redirect Intel 7115 set redirect 2 none Intel 7115 show redirectNext, import the client CA certificate for Map ID Intel 7115 import clientcaGenerate the client CA certificate Creating a Client CA Certificate using OpenSSL§Generate a certificate signing request Mapping SSL ProcessingAutomapping Automapping with user-specified key and certificate Automapping with multiple port combinationsDeleting automapping entries Manual mappingUse the show block command to verify Combining automapping and manual mappingAll IPs, Specific Port Subnet IP, Specific PortUse show block to verify Delete a Block Use the show block command to confirm the blockIntel 7115 delete block Failure Conditions, Fail-safe, and Fail-through Scenarios Syntax Manual Configuration Procedure for ScenarioScenario 1-Single Server Intel 7115delete map 1 Intel 7115list maps This scenario shows how to configure two or more servers Scenario 2-Multiple ServersID KeyID Scenario 3-Multiple 7110/ 7115s, Cascaded AssumptionsIntel 7115 export config Multiple Cascaded 7110/7115sIntel 7115 import config Save the configurationAfter verification y or refusal n, the prompt reappears To reverse this process Intel 7115set egressmac noneCommand Reference Online HelpCommand Line Interface User AuthenticationCommand Line Prompt Abbreviation to UniquenessA P T E R Command Line Interface Command History Input Editing CommandsMoving the Insertion Point Cut and Paste Command Summary Nic Password Reboot Command Command Options ImportInline List Command Command Options Set Command Command Options Show Setsnmp ShowsnmpStatus TtycharHelp Commands Command ReferenceStatus Command SSL Commands Command Description Create keyDelete key Import keyShow key Command Description Export keyList keys Command Description Create cert Delete certImport cert Export certCommand Description Show cert Display the expanded certificate including PEM formatDisplays all certificates Set ciphersShow redirect Command Description Set redirectShow clientca Delete clientca Command Description Import clientcaCreate sign Export sign Command Description Delete signShow sign keyID Command Description Set defcert Issuer e-mail address. You can change all, some or noneDisplay the default certificate creation information FieldCommand Description Set kstrength Show kstrengthSet clienttmo Show clienttmoCommand Description Set servertmo Displays the currently specified server timeout valueClient request is rejected Show servertmoPort Mapping Commands Command Definition Create blockDelete block Show blockDelete permit Command Definition Create permitShow permit Command Definition Create map Delete map mapIDShow map List mapsCommand Description Bypass Operational CommandsInline Command Description Set spill Show spillCommand Description Set ip Remote Management CommandsMaxremotesessions Show telnet Command Description Set telnetSet telnetport Command Description Show telnetport Set sshShow ssh Set sshportShowsnmp snmp Command Description Setsnmp snmpSetsnmp snmpinfo Snmpcommunity CommandDescriptionDelete Snmp community strings Trapcommunity Command Description Setsnmp trapauthenList trapcommunity Delete trapcommunity Delete Snmp trap community strings Intel 7115 delete trapcommunityAlarms and Monitoring Commands Command Description Set alarmsShow alarms Set rscwindowSet utlwindow Command Description Show rscwindowSet utlhighwater Command Description Set utllowwater Show utlwindowShow utlhighwater Show utllowwaterCommandDescription Show ovlwindow Intel 7115 show ovlwindowCommand Description Show config Configuration CommandsDisplay current volatile configuration settings Intel 7115 show config default Default configuration Command Description Config compare Config resetConfig default Config saveCommand Description Export config Configuration specifics are displayedImport config Import a configuration file paste, xmodem, uudecodeImport patch Command Description Import upgradeList system Command Description Factorydefault Returns to factory configuration settingsAdministration Commands Command Description PasswordShow info Set dateCommand Description Set egressmac Set etherShow ether Set idletoCommand Description Set more NicSet prompt Set serialLogging Commands Command Description Show serialCommand Description ExitCommand Description Delete log Delete saved log/trace files from /flash/logsAll deletes all logs List logsRemote Management OverviewRemote Management CLI Commands LimitationsA P T E R Overview Remote Telnet Sessions Local Serial ConsoleRemote Console, Telnet Changing the Telnet PortTo display the Telnet port Unix-prompttelnetTo verify Telnet disable Enable remote SSh sessionsRemote SSh Sessions Disabling TelnetUnix-promptssh -1 admin PasswordpasswordRemote Console, SSh Changing the SSh PortTo verify SSh disable Intel 7115 set ssh disableDisabling SSh To display the SSh portStandards Compliance Intel MIB TreeWhere to find MIB Files Supported MIBsManagement Information Base-II MIB-II Intel Enterprise MIBs Ceo-header.myEnterprise Private MIB Summary Following is a summary of the 7110/7115 private MIBPage Snmp ThrottlesPerSec Number of throttles per second Snmp Standard Snmp Traps Trap SummaryPrivate Traps in ssl-appliance-mib.my Intel 7115 setsnmp snmp disable Intel 7115 showsnmp snmp Intel 7115 setsnmp snmp enable Intel 7115 showsnmp snmpEnabling Snmp Specifying Snmp Information Intel 7115 showsnmp snmpinfoCommunity String Intel 7115 delete snmpcommunityUse CLI commands, setsnmp trapcommunity, list Trap Community StringAccess Control Page Alarms Monitoring CLI commands for alarm configuration are Set alarms All, esc, rsc, utl, ovl, nls None Show alarmsAlarm Types ESC Encryption Status Change AlarmAlarm Modifiers and Messages For exampleRSC Alarm CLI Commands To set Overload Alarm time windowRSC Refused SSL Connections Extended DataUTL Utilization Threshold Alarm To display Overload Alarm time windowThis alarm monitors three utilization threshold values Intel 7115 set rscwindow Intel 7115 show rscwindowUTL Alarm CLI commands To set Utilization Threshold Alarm time windowTo set Utilization Threshold Alarm high-water value To set Utilization Threshold Alarm low-water valueOVL Overload Alarm OVL Alarm CLI CommandsIntel 7115 set ovlwindow seconds Range Intel 7115 set ovlwindow Intel 7115 show ovlwindowAlarm Logging NLS Network Link Status AlarmIntel 7115 status Respend Inline Ip 10.1.11.34 netmask Example, status alarms command Intel 7115 status alarmsReport Configuration MonitoringMonitoring Reports Monitor report formatMonitoring Reports CLI Commands Intel 7115 set monitoringfieldsIntel 7115 set monitoring enable Intel 7115 show monitoring Intel 7115 show monitoringfieldsPage Software Updates Press y for yes at the Continue with upgrade? prompt Using Windows§ HyperTerminal§Intel 7115 import upgrade Command import patch Connect the serial cable to the 7110/7115 auxiliary consoleTo send the uuencoded file use the ~ command Intel 7115import upgradeIntel 7115import patch Page Troubleshooting Intel 7115 set clienttmo Error message Intermediate See Global Site CertificatesError message Server SettingsThen use the nic command to force Different mediaFront Panel LEDsButtons and Switches Press to physically force bypass mode bypass 7110/7115Front Panel LEDs ProcessingSee Appendix B, Failure OverloadConnectors Enable 7110/7115 processing Failure/Bypass ModesFail-through Switch Security Level Bypass ButtonP E N D I X B Fail-through Switch Security Level Page Supported Ciphers Cipher StrengthSSL Version Level RC2 SSLv2 RC2128RC4-64 SSLv2 RC464Page Regulatory Information Taiwan Class a EMI StatementVcci Statement FCC Part 15 Compliance StatementCanada Compliance Statement Industry Canada CE Compliance StatementCispr 22 Statement Vcci Class a Japan AustraliaAvertissement Warnung Advertencias Wichtige Sicherheitshinweise Wichtige Sicherheitshinweise Page Terms and Conditions and Software License END User Terms and Conditions of Sale and Software LicensePage P E N D I X E Page Year warranty Process of being installed Export Law Regulations Page Glossary Glossary-2 Glossary-3 Glossary-4 Support Services Worldwide Access to Technical SupportNorth America only Japan onlySupport-2 Intel NetStructure 7110/7115 e-Commerce Accelerator User Support-4 Index D E Index-3 Index-4