H3C SecBlade SSL VPN Card

Transcription

1 H3C SecBlade SSL VPN Card License Registration and Activation Guide Hangzhou H3C Technologies Co., Ltd. Document version: 5PW

2 Copyright 2010, Hangzhou H3C Technologies Co., Ltd. and its licensors All rights reserved Trademarks No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Hangzhou H3C Technologies Co., Ltd. H3C,, Aolynk,, H 3 Care,, TOP G,, IRF, NetPilot, Neocean, NeoVTL, SecPro, SecPoint, SecEngine, SecPath, Comware, Secware, Storware, NQA, VVG, V 2 G, V n G, PSPT, XGbus, N-Bus, TiGem, InnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co., Ltd. Notice All other trademarks that may be mentioned in this manual are the property of their respective owners The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute the warranty of any kind, express or implied.

3 Preface The H3C SecBlade SSL VPN Card License Registration and Activation Guide describes how to register and activate licenses for an H3C SecBlade SSL VPN card. This preface includes: Audience Conventions Obtaining documentation Technical support Documentation feedback Audience This documentation is intended for: Network planners Field technical support and servicing engineers Network administrators working with the H3C SecBlade SSL VPN cards Conventions GUI conventions This section describes the conventions used in this documentation set. Convention Boldface Description Window names, button names, field names, and menu items are in Boldface. For example, the New User window appears; click OK. > Multi-level menus are separated by angle brackets. For example, File > Create > Folder. Symbols Convention NOTE IMPORTANT Description An alert that calls attention to essential information. An alert that contains additional or supplementary information.

4 Obtaining documentation You can access the most up-to-date H3C product documentation on the World Wide Web at Click the links on the top navigation bar to obtain different categories of product documentation: [Technical Support & Documents > Technical Documents] Provides hardware installation, software upgrading, and software feature configuration and maintenance documentation. [Products & Solutions] Provides information about products and technologies, as well as solutions. [Technical Support & Documents > Software Download] Provides the documentation released with the software version. Technical support Documentation feedback You can your comments about product documentation to We appreciate your comments.

5 Contents Overview 1 License registration procedure 2 Registering licenses 3 Registering the first time 3 Registering an upgrade license 5 Activating licenses 9 Logging in to the SSL VPN management page 9 Importing the activation file 10 Obtaining the device serial number and license key 12 Obtaining the device serial number 12 Obtaining the license key 14 Technical support 15 Index 16 i

6 Overview The H3C SecBlade SSL VPN card can handle a maximum of 500 online users by default without registration. To handle more online users, purchase and register a license for your SecBlade SSL VPN card. 1

7 License registration procedure License registration has the following procedures: Registering the first time Register a license for a SecBlade SSL VPN card that has never been activated. Registering an upgrade license Register a license for add-on nodes, add-on features, or time extension. After you register your product license, use the activation file to activate the license on your SecBlade SSL VPN card. For more information, see Activating licenses. Figure 1 License registration and activation procedure 2

8 Registering licenses Registering the first time Step1 Go to the H3C website at and select Technical Support & Documents > Product Licensing > Register the First Time. Figure 2 Register the first time Step2 Select Security_SSL VPN from the Product category dropdown list. If you are not sure of the product category, type the license key in the text box and click Submit. Figure 3 Select a product category Step3 Type the license, device, and contact information, select I accept all terms of H3C Legal Statement, and click Get activation key or file. For more information about the fields, see Table 1. 3

9 Figure 4 Type the information Table 1 Field description Item Description Remarks Upload license keys from excel file Input license keys or select by sales contract H3C device S/N Customer company/organization Follow these steps to upload license keys: 1. Click the Download the template link to save the template. 2. Fill in the file with license keys. Check your software license certificates for the license keys. 3. Click Browse to select the file, and click Upload. Type the license key in the text box. To add more license keys, click Continue adding license key. If the license key is in an industry customer contract, the system automatically populates the remaining license keys in the contract. Type the serial number of the SecBlade SSL VPN card. The number is a string of 20 characters. For information about how to obtain the device serial number, see Obtaining the device serial number and license key. Type the name of the company or organization that uses the SecBlade SSL VPN card. Required Use either approach. Required Required Company/organization Type your company or organization name. Required 4

10 Item Description Remarks First name/last name Type your name. Required Phone number Type your phone number. Required address Type your address. H3C will send a copy of the activation file to your box and provide a link to the activation file. Required Zip code Type the zip code of your region. Optional Address Type your address. Optional Project name Verify code Type the name of the project that sold the SecBlade SSL VPN card. For internal user only. Type the code literally as is displayed on the picture to the right of the text box. Optional Required Step4 When the registration success message appears, click the.lic link to save the activation file. Unzip the file and follow the procedures described in Activating licenses to activate the licenses on your SecBlade SSL VPN cards. Figure 5 Registration success message Registering an upgrade license Step1 Go to the H3C website at and select Technical Support & Documents > Product Licensing > Register Upgrade Licenses. Figure 6 Register upgrade licenses 5

11 Step2 Select Security_SSL VPN from the Product category dropdown list. If you are not sure of the product category, type the license key in the text box and click Submit. Figure 7 Select a product category Step3 Type the license, device, and contact information, select I accept all terms of H3C Legal Statement, and click Get activation key or file. For more information about the fields, see Table 2. 6

12 Figure 8 Type the information for license upgrade Table 2 Field description Item Description Remarks Upload license keys from excel file Input license keys or select by sales contract H3C device S/N Customer company/organization Follow these steps to upload license keys: 1. Click the Download the template link to save the template. 2. Fill in the file with license keys. Check your software license certificates for the license keys. 3. Click Browse to select the file, and click Upload. Type the license key in the text box. To add more license keys, click Continue adding license key. If the license key is in an industry customer contract, the system automatically populates the remaining license keys in the contract. Type the device serial number. The number is a string of 20 characters. For information about how to obtain the device serial number, see Obtaining the device serial number and license key. Type the name of the company or organization that uses the SecBlade SSL VPN card. Required Use either approach. Required Required Company/organization Type your company or organization name. Required First name/last name Type your name. Required 7

13 Item Description Remarks Phone number Type your phone number. Required address Type your address. H3C will send a copy of the activation file to your box and provide a link to the activation file. Required Zip code Type the zip code of your region. Optional Address Type your address. Optional Project name Verify code Type the name of the project that sold the SecBlade SSL VPN card. Type the code literally as is displayed on the picture to the right of the text box. Optional (For internal user only.) Required Step4 When the registration success message appears, click the.lic link to save the activation file. Unzip the file and follow the procedures described in Activating licenses to activate the licenses on your SecBlade SSL VPN cards. Figure 9 Registration success message 8

14 Activating licenses Logging in to the SSL VPN management page Before you log in to the SSL VPN web management page, access the SSL VPN command line interface through the console port of the SecBlade SSL VPN card to perform basic configuration. For more information about logging in to the SSL VPN management page, see Step-by-Step Configuration of H3C SSL VPN. Step1 Connect the devices. Use a console cable to connect the serial port of your PC to the console port of the SSL VPN card. Use a crossover Ethernet cable to connect the PC to a service interface on the network device (an S7500E switch or an SR6600 router for example) that hosts the SecBlade SSL VPN card. Figure 10 Connect the devices Console SecBlade SSL VPN PC Ethernet Device Step2 Configure the terminal emulation program on your PC. Run a terminal emulation program, such as Terminal in Windows 3.X or HyperTerminal in Windows 9X and Windows XP. Set the terminal communication parameters as follows: Baud rate 9600 bps Data bits 8 Parity None Stop bit 1 Flow control none NOTE: Values for the terminal communication parameters depend on the device model. Step3 Configure the SecBlade SSL VPN card at the command line interface through the console port. The SSL VPN service is enabled by default. Assign an IP address, /24 for example, to the internal interface that connects the card to the network device. Configure a static route to the PC, for example, ip route-static

15 Save the configuration. Step4 Configure the network device that holds the SSL VPN card. Assign an IP address, /24 for example, to the internal interface that connects the network device to the SSL VPN card. Assign an IP address, /24 for example, to the interface that connects the network device to the PC. Configure a default route, for example, ip route-static Make sure that the PC and the SSL VPN card can reach each other. Step5 Access the web management page for the SecBlade SSL VPN through HTTPS. You can access from the same PC where you access the command line interface or from a different PC. Launch an IE browser and enter in the address bar, where gateway represents the IP address of the SSL VPN card. The login page shown in Figure 11 appears. Type the username and the password, select root, and click Login to log in as a super administrator. NOTE: Only the super administrator can import an activation file to the SecBlade SSL VPN card. The login page address for administrators, including the super administrator, is and the login page address for common users is The default username and password for super administrator are both administrator. Figure 11 Login page IMPORTANT: To avoid security risks, change the default password at your first login. Importing the activation file Step1 Select Domain > Domain Policy from the left navigation tree, and click the License tab to enter the license configuration page in Figure

16 Figure 12 License Import tab Step2 Click Browse to select the activation file and click Import. The activation file will be imported and the license will be activated on the SecBlade SSL VPN card. 11

17 Obtaining the device serial number and license key NOTE: The figures in this section are for illustration only. Obtaining the device serial number Use one of the following methods to obtain the device serial number. 1. Check the device label on the SecBlade SSL VPN card package. Figure 13 Device label 2. Check the bar code label on the SecBlade SSL VPN card panel. Figure 14 Bard code label 3. Check the warranty card that came with your SecBlade SSL VPN card. 12

18 Figure 15 Serial number on the warranty card 4. Check the software license certificate. Figure 16 Serial number on the software license certificate 5. Log in to the web management page, and select Domain > Domain Policy from the left navigation tree. The serial number is on the License tab. Figure 17 Device serial number on the License tab 13

19 Obtaining the license key Check your software license certificate for the license key. Figure 18 License key 14

20 Technical support If you encounter any problem during license registration or activation, please contact us at 15

21 Index I Importing the activation file 10 L Logging in to the SSL VPN management page 9 O Obtaining the device serial number 12 Obtaining the license key 14 R Registering an upgrade license 5 Registering the first time 3 16