NETWORK INTERFACE CARDS UPGRADE GUIDE

Transcription

1 NETWORK INTERFACE CARDS UPGRADE GUIDE Webwasher Web Gateway Security e

2 Part Number: C All Rights Reserved, Published and Printed in Germany 2008 Secure Computing Corporation. This document may not, in whole or in part, be copied, photocopied, reproduced, translated, or reduced to any electronic medium or machine-readable form without prior consent in writing from Secure Computing Corporation. Every effort has been made to ensure the accuracy of this manual. However, Secure Computing Corporation, makes no warranties with respect to this documentation and disclaims any implied warranties of merchantability and fitness for a particular purpose. Secure Computing Corporation shall not be liable for any error or for incidental or consequential damages inconnectionwith the furnishing, performance, or use of this manual or the examples herein. The information in this document is subject to change without notice. Webwasher, MethodMix, AV PreScan, Live Reporting, Content Reporter, ContentReporter, Real-Time Classifier are all trademarks or registered trademarks of Secure Computing Corporation in Germany and/or other countries. Microsoft, Windows NT, Windows 2000 are registered trademarks of Microsoft Corporation in the United States and/or other countries. McAfee is a business unit of Network Associates, Inc. CheckPoint, OPSEC, and FireWall-1 are trademarks or registered trademarks of CheckPoint Software Technologies Ltd. or its affiliates. Sun and Solaris are trademarks or registered trademarks of Sun Microsystems, Inc. in the United States and other countries. Squid is copyrighted by the University of California, San Diego. Squid uses some code developed by others. Squid is Free Software, licensed under the terms of the GNU General Public License. NetCache is a registered trademark of Network Appliances, Inc. in the United States and other countries. Linux is a registered trademark of Linus Torvalds. Other product names mentioned in this guide may be trademarks or registered trademarks of their respective companies and are the sole property of their respective manufacturers. Secure Computing Corporation Webwasher A Secure Computing Brand Vattmannstrasse 3, Paderborn, Germany Phone: +49 (0) Fax: +49 (0) info@webwasher.com European Hotline Phone: +49 (0) US Hotline Phone: ,

3 Contents Chapter 1 Introduction Chapter 2 Additional Ports Chapter 3 Upgrade Procedure Chapter 4 Testing the Interface Numbering Interface Numbering on the WW Interface Numbering on the WW Interface Numbering on the WW Interface Numbering on the WW i

4

5 Introduction Chapter 1 This document describes how to upgrade the network interface cards (NICs) on a Webwasher appliance, using a special type of Gbit network interface card with six ports on it. You can do an upgrade with one or two cards, depending on the appliance model, see below. The upcoming sections provide information about the number of additional ports that will be available after the upgrade for each of the various appliance models, see Chapter 2. Furthermore, the upgrade procedure is described, see Chapter 3. Finally, it is shown how the interface numbering was affected when new network interface cards were installed on the various appliance models, see Chapter

6

7 Additional Ports Chapter 2 Depending on the appliance model, you can just insert the network interface card mentioned above in a free slot or replace one or two of the existing cards, thus increasing the number of ports in different ways: WW500 The WW500 Appliance is equipped with two onboard network interfaces, each of them providing one port. By inserting a network interface card with six ports in a free slot, you can increase the total number of ports to eight: 2+6=8 WW1100 The WW1100 Appliance is equipped with two onboard network interfaces, each of them providing one port. One of these ports is a Dual Port. Furthermore, there is a network interface card, providing two ports. You can replace the latter by a card with six ports, which increases the total number of ports to eight: 2+(2 2+6)=8 WW1900 The WW1900 Appliance is equipped with two onboard network interfaces and two network interface cards, each of them providing one port. You can replace one of the network interface cards by a card with six ports, which increases the total number of ports to nine, or replace both network interface cards by cards with six ports, thus increasing the total number of ports to 14: 2+1+(1 1+6)=9 or: 2+(1 1+6)+(1 1+6)=14 2 1

8 Additional Ports WW2900 The WW2900 Appliance is equipped with two onboard network interfaces and one additional network interface card, providing two ports. You can insert another card with six ports in one of the two free slots that are provided for this purpose, which increases the number of ports to 10, or insert a card in each of the slots, thus increasing the total number of ports to 16: 2+2+6=10 or: =16 2 2

9 Upgrade Procedure Chapter 3 To complete the upgrade procedure for the network interface cards on your Webwasher appliance, proceed as follows: 1. Power down the appliance and unplug the power cord. 2. Open the appliance cover. Note: As always, observe the usual ESD (Electro Static Discharge) procedures when handling network interface cards. 3. Install the network interface card or cards on the appliance. To do this, proceed according to the appliance model in question: WW500 Insert the new network interface card in the free slot provided for this purpose on the rear side of the appliance box. The following diagram shows the rear panel of a WW500 appliance box. On the right side of this panel, there are two free slots for installing additional devices. Use the upper slot to install the additional network interface card: Note, however, that the slot positions may vary according to the particular version of the appliance model in question. For a complete description of the elements on the rear side of the WW500 Appliance, see the Rear Side subsection of section 2.1 in the Installation and Configuration Guide, Webwasher Appliances. 3 1

10 Upgrade Procedure WW1100 Remove the network interface card that is already installed in one of the NIC slots on the rear side of the appliance, and insert the new network interface card instead. The following diagram shows the positions of these slots (9 and 10): Note, however, that the slot positions may vary according to the particular version of the appliance model in question. For a complete description of the elements on the rear side of the WW1100 Appliance, the Rear Side subsection of section 2.3 in the Installation and Configuration Guide, Webwasher Appliances.. WW1900 Upgrading one network interface card Remove one of the two network interface cards that are already installed when the appliance is shipped, and insert the new network interface card instead. The following diagram shows the positions of the network interface slots (2, 6, 7, and 8) on the rear side of a WW1900 Appliance: Note, however, that the slot positions may vary according to the particular version of the appliance model in question. Of the slots shown in the diagram, only the upper two (2 and 8) can be used for removing and replacing network interface cards since the lower slots belong to the appliance mainboard. 3 2

11 Upgrade Procedure Furthermore, it is recommended that you remove and replace the network interface card located in the upper right slot if you just want to exchange one card. For a complete description of the elements on the rear side of the WW1900 Appliance, the Rear Side subsection of section 2.4 in the Installation and Configuration Guide, Webwasher Appliances. Upgrading two network interface cards Remove both network interface cards that are already installed when the appliance is shipped, and insert the two new network interface cards instead. WW2900 Adding one network interface card Insert the new network interface card in one of the two free slots on the rear side of the appliance. It is recommended that you use the upper of the two slots for this purpose. Adding two network interface cards Insert a new network interface card in each of the two free slots on the rear side of the appliance. 4. Close the appliance cover. 5. Attach a keyboard and monitor directly to the appliance. 6. Plug in the power cords for appliance and monitor. 7. Power on the appliance. 8. Boot the appliance. 9. Because the interfaces may have renumbered during the reboot, verify your cabling and connectivity by doing the following: a. Log into the system using the keyboard and monitor. b. Use the ifconfig -a command to get the interface s information. Write down the interface name, e. g. eth0, IP address, and netmask for each interface. Also note if the interfaces are enabled. Note: If an interface is not enabled, then it may not be enabled in the GUI, there may not be a cable in the corresponding port, the cable may not work, or the device at the other end may not work. Follow standard troubleshooting techniques to resolve the problem. c. Verify that each cable allows connection to the machine that matches its intended subnet and netmask. Once everything is cabled correctly, ping the IP address of each neighboring machine. If you receive a response, your interface configuration and cabling is correct. d. If you do not receive a response and you have verified the other factors listed above, then your interfaces and your cables are not properly matched. Swap the cables until each port connects to the expected network. 3 3

12 Upgrade Procedure The interface numbering on the various appliance models after installing new cards were tested, and the results are shown in the next chapter. 3 4

13 Chapter 4 Testing the Interface Numbering This chapter describes the results of a test that was performed in order to establish the numbering of the interfaces eth0, eth1, etc. on the various appliance models after one or two new six-port network interface cards had been installed there. 4.1 Interface Numbering on the WW500 An additional network interface card with six ports on it, representing the model mentioned above, was inserted in the free slot provided for this purpose. Before installing the additional card, the two network interfaces on this appliance were numbered as follows: Onboard interface 1 Onboard interface 2 eth0 eth1 After installing the additional card, the interface numbering was: Onboard interface 1 Onboard interface 2 eth6 eth7 Additional card eth5 eth4 eth3 eth2 eth1 eth0 4 1

14 Testing the Interface Numbering 4.2 Interface Numbering on the WW1100 The network interface card that is already installed in the additional slot on the rear side of the appliance when it is shipped was removed. A network interface card with six ports on it, representing the model mentioned above, was inserted there instead. Before installing the new additional card, the four network interfaces on this appliance were numbered in the following way: Onboard interface 1 Onboard interface 2 eth2 eth3 Additional card eth1 eth0 After installing the new additional card, the interface numbering was as follows: Onboard interface 1 Onboard interface 2 eth6 eth7 New additional card eth5 eth4 eth3 eth2 eth1 eth0 4 2

15 Testing the Interface Numbering 4.3 Interface Numbering on the WW1900 On this model of the Webwasher appliance, two network interface cards are already installed in slots at the rear side when the appliance is shipped. You may either replace and upgrade one of these cards or both. Replacing One Network Interface Card Before installing the new card, the four network interfaces on this appliance were numbered in the following way: Two additional cards eth0 eth1 eth3 eth2 The new card was first used to replace the additional network interface card in the left slot. The interface numbering was then as follows: Left additional card new eth0 eth1 eth2 eth3 eth4 eth5 eth6 eth8 eth7 Then the new card was used to replace the additional network interface card in the right slot. This led to the following interface numbering: Right additional card new eth6 eth0 eth1 eth2 eth3 eth4 eth5 eth8 eth7 4 3

16 Testing the Interface Numbering Replacing Two Network Interface Cards Before installing the two new cards, the four network interfaces on this appliance were numbered in the following way: Two additional cards eth0 eth1 eth3 eth2 Then both additional cards were replaced by new cards. This led to the following interface numbering: Both additional cards new eth0 eth1 eth2 eth3 eth4 eth5 eth6 eth7 eth8 eth9 eth10 eth11 eth13 eth Interface Numbering on the WW2900 On this model of the Webwasher appliance, one additional network interface card is already installed in a slot at the rear side when the appliance is shipped. Furthermore, there are two free slots for more additional network interface cards. You may use these to insert either one or two cards. Adding One Network Interface Card Before installing the new card, the four network interfaces on this appliance were numbered in the following way: Additional card eth0 eth1 eth3 eth2 4 4

17 Testing the Interface Numbering After inserting a new card in the upper of the two free slots, the interface numbering was as follows: Additional card eth0 eth1 eth9 eth8 New card in upper slot eth2 eth3 eth4 eth5 eth6 eth7 Adding Two Network Interface Cards Before installing the two new cards, the four network interfaces on this appliance were numbered in the following way: Additional card eth0 eth1 eth3 eth2 After inserting the two new cards in the free slots, the interface numbering was as follows: Additional card eth6 eth7 eth15 eth14 New card in upper slot New card in lower slot eth8 eth9 eth10 eth11 eth12 eth13 eth0 eth1 eth2 eth3 eth4 eth5 4 5