background image

Changing Trusted Access Gateway Settings

SNS-TAG-HPA / SNS-TAG-LPA Installation Guide 3-3

You

 

are

 

now

 

ready

 

to

 

use

 

Trusted

 

Access

 

Manager

 

to

 

manage

 

your

 

Trusted

 

Access

 

Gateway

 

appliance.

 

If

 

this

 

is

 

your

 

initial

 

commissioning

 

of

 

the

 

appliance,

 

you

 

can

 

launch

 

Trusted

 

Access

 

Manager

 

and

 

select

 

Getting

 

Started

 

from

 

the

 

Trusted

 

Access

 

Manager

 

Help

 

pull

down

 

menu

 

for

 

information

 

on

 

using

 

Trusted

 

Access

 

Manager

 

to

 

configure

 

and

 

manage

 

your

 

TAG

 

appliance.

 

If

 

you

 

are

 

upgrading

 

your

 

Trusted

 

Access

 

Gateway

 

software,

 

be

 

sure

 

to

 

enforce

 

the

 

TAG

 

appliance

 

(via

 

Trusted

 

Access

 

Manager)

 

following

 

the

 

upgrade

 

operation.

 

Enforcing

 

writes

 

your

 

Trusted

 

Access

 

Manager

 

Security

 

Domain

 

information

 

to

 

the

 

appliance.

Changing Trusted Access Gateway Settings

Use

 

these

 

steps

 

if

 

you

 

need

 

to

 

change

 

your

 

TAG

 

appliance

 

settings

 

following

 

your

 

initial

 

appliance

 

configuration.

Changing Basic Network Configuration

To

 

change

 

basic

 

network

 

configuration

 

settings

 

such

 

as

 

hostname

 

and

 

appliance

 

IP

 

address,

 

enter

 

the

 

following

 

command

 

at

 

the

 

appliance

 

CLI:

/opt/tag/dnetconfig

This

 

will

 

start

 

the

 

network

 

configuration

 

script

 

and

 

allow

 

you

 

to

 

make

 

the

 

required

 

changes.

 

You

 

must

 

reboot

 

the

 

appliance

 

for

 

the

 

new

 

settings

 

to

 

take

 

effect.

Changing the Management Server IP Address

To

 

change

 

the

 

IP

 

address

 

of

 

the

 

management

 

server,

 

enter

 

the

 

following

 

command

 

at

 

the

 

appliance

 

CLI:

/opt/tag/configMgmtIP <IP address>

Then,

 

start

 

using

 

the

 

new

 

management

 

server

 

by

 

typing:

tagctl restart

Enabling the SNMP Daemon

To

 

enable

 

the

 

SNMP

 

daemon,

 

enter

 

the

 

following

 

command

 

at

 

the

 

appliance

 

CLI:

/usr/postinstall/snmpconfig

Follow

 

the

 

configuration

 

instructions.

Then,

 

start

 

the

 

SNMP

 

daemon

 

by

 

entering:

/etc/rc.d/rc.net-snmp restart

If

 

you

 

reboot

 

the

 

appliance,

 

the

 

SNMP

 

daemon

 

will

 

start

 

automatically.

Changing SNMP Passwords

To

 

change

 

SNMP

 

passwords,

 

enter

 

the

 

following

 

commands

 

at

 

the

 

appliance

 

CLI:

vi/etc/snmp/snmpd.conf
/etc/rc.d/rc.net-snmp restart

Summary of Contents for Sentinel SNS-TAG-HPA

Page 1: ...Enterasys Sentinel Trusted Access Gateway Appliance SNS TAG HPA SNS TAG LPA Installation Guide P N 9034297 01...

Page 2: ......

Page 3: ...0 Minuteman Road Andover MA 01810 2007 Enterasys Networks Inc All rights reserved Part Number 9034297 01 May 2007 ENTERASYS ENTERASYS NETWORKS ENTERASYS ROAMABOUT ENTERASYS MATRIX ENTERASYS SENTINEL L...

Page 4: ...s A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regulations of the Canadian Department of Communications Le pr sent appareil num rique n met pas de bruits...

Page 5: ...EE Notice In accordance with Directive 2002 96 EC of the European Parliament on waste electrical and electronic equipment WEEE 1 The symbol above indicates that separate collection of electrical and e...

Page 6: ...is above the relevant threshold of the SJ T 11363 2006 standard This table shows where these substances may be found in the supply chain of Enterasys electronic information products as of the date of...

Page 7: ...asures Declaration of Conformity Application of Council Directive s 89 336 EEC 73 23 EEC Manufacturer s Name Enterasys Networks Inc Manufacturer s Address 50 Minuteman Road Andover MA USA 01810 Europe...

Page 8: ...rt including for reasons of error correction or interoperability except to the extent expressly permitted by applicable law and to the extent the parties shall not be permitted by that applicable law...

Page 9: ...by agree to maintain complete books records and accounts showing i license fees due and paid and ii the use copying and deployment of the Program You also grant to Enterasys and its authorized represe...

Page 10: ...nforced to the maximum extent permissible Any such invalidity illegality or unenforceability in any jurisdiction shall not invalidate or render illegal or unenforceable such provision in any other jur...

Page 11: ...ssemble electronically transfer or reverse engineer the Licensed Software or to translate the Licensed Software into another computer language The media embodying the Licensed Software may be copied b...

Page 12: ...bligation under this Agreement including a failure to pay any sums due to Enterasys or in the event that You become insolvent or seek protection voluntarily or involuntarily under any bankruptcy law E...

Page 13: ...tes do not allow limitations on how long an implied warranty lasts and some states do not allow the exclusion or limitation of incidental or consequential damages so the above limitation and exclusion...

Page 14: ...xii...

Page 15: ...2 5 Chapter 3 Configuration Pre Configuration Tasks 3 1 Configure the Appliance 3 1 Changing Trusted Access Gateway Settings 3 3 Changing Basic Network Configuration 3 3 Changing the Management Server...

Page 16: ...xiv...

Page 17: ...Agent is required for communication between the TAG appliance and the Lockdown Enforcer appliance Installing the Assessment Agent on the Nessus Server Provides instructions for installing the Enterasy...

Page 18: ...at could result in personal injury or death due to an electrical hazard Riesgo de electrocuci n Advierte contra una acci n que pudiera resultar en lesi n corporal o la muerte debido a un riesgo el ctr...

Page 19: ...tached front rack mount brackets One non redundant power supply One power cord U S version Mid mount rack mounting accessory kit One USB flash drive Front Panel Controls and Indicators Figure 1 1 show...

Page 20: ...N Displays configured appliance parameters on the LCD Appliance IP Address Gateway IP Address Appliance Network Mask Management Server IP Address ENT Displays the installed TAG software version number...

Page 21: ...wer Supply Specifications Parameter Description Input voltage 100 to 125 Vac 6 A 50 60 Hz 200 to 240 Vac 3 A 50 60 Hz Output voltage 5 V 3 A 25 A 12 V 2 A 28 A 5 V 0 A 0 5 A 12 V 0 A 0 5 A 3 3 V 1 A 2...

Page 22: ...197 feet below sea level to 4000 meters 13 123 feet above sea level Non Operating humidity 5 to 95 non condensing Acoustic noise Sound Pressure 55 dBA Rackmount in an idle state at typical office amb...

Page 23: ...que la del ambiente a nivel de habitaci n Por lo tanto debe considerar la posibilidad de instalar el equipo en un entorno compatible con la temperatura ambiente m xima Tma de 40 C 104 F Reduced Air F...

Page 24: ...problema Reliable Earthing Reliable earthing of rack mounted equipment should be maintained Particular attention should be given to supply connections other than direct connections to the branch circ...

Page 25: ...as usadas de acuerdo con las instrucciones Enterasys le recomienda que se ponga en contacto con el departamento de Asistencia t cnica en www enterasys com services support contact si requiere servici...

Page 26: ...s section describes how to install the TAG appliance into a rack Rack mount options include Front mount Front mount and mid mount Front Mount Figure 2 1 shows the appliance front panel being attached...

Page 27: ...acement example To attach the appliance to the rack perform the following steps 1 Use the two mounting holes closest to the center of the appliance for more balanced mounting position 2 Use the M4 scr...

Page 28: ...Rack Mounting 2 6 Installation...

Page 29: ...iance To configure the appliance to run the Trusted Access Gateway software 1 Login as root with no password and then press Enter You will receive a warning that there is no root password detected and...

Page 30: ...ress Enter again in the second verification screen to accept Basic network configuration is complete The ENTER MANAGEMENT SERVER IP screen appears 13 Enter the IP address of the management server high...

Page 31: ...Changing Basic Network Configuration To change basic network configuration settings such as hostname and appliance IP address enter the following command at the appliance CLI opt tag dnetconfig This w...

Page 32: ...Changing Trusted Access Gateway Settings 3 4 Configuration...

Page 33: ...uccessfully installed into drive letter Press any key to continue 6 Remove the USB flash drive from your system 7 Insert the USB flash drive into either USB port see Figure 1 1 on the TAG appliance 8...

Page 34: ...4 2 Upgrading Trusted Access Gateway Software...

Reviews: