Configuring management interfaces

Use the Management Interfaces page to view and configure the network management interfaces for the appliance.

About this task

Navigating in the Local Management Interface: Click Manage > Management Interfaces.

Navigating in the SiteProtector™ System:

Select the Policy view.
In the My Sites pane, expand the Locally Configured Agents menu item, and then select your Network Security agent.
In the Local Policies pane, select Management Interfaces, and then click Action > Open.

Remember: When you change the IP address of the management interfaces, connect your web browser to the new IP address for future sessions.

Note: Changing the appliance host name causes the system to reset the network connection. You must reconnect after the network connection is reset. This process does not interrupt traffic through the appliance protection interfaces.

Procedure

On the Management Interfaces page, type a Host name.
Select the Default Interface check box.
Optional: To configure a secondary management interface to inject TCP reset frames in monitoring mode make the following selections:
1. On the tab for the interface you want to use as a secondary management, select Enable interface name.
2. On the General tab, select the secondary management interface in the Use as monitoring mode TCP reset interface list.
3. Optional: To ensure that injected TCP resets are correctly routed to their destination, you can specify the MAC address of the gateway that is connected to the same network segment as the TCP reset interface. Type the Gateway MAC address to use as the destination of the TCP reset frame in the Gateway MAC Address field.
Restriction: You cannot select the default management interface as the TCP reset interface.

Click the tab for the primary interface, and then configure the following IPV4 and IPV6 options:

Option	Description
Auto/Manual	Choose the appropriate mode: Select Auto to acquire an IP address from a DHCP server. Select Manual to specify a static IP address, Netmask, and Gateway (IPv4) or Prefix (IPv6).
Address	If you selected Manual mode, type the IP address that you want to use for the interface.
Gateway	If you selected Manual mode, type the Gateway for the interface.
Netmask (IPv4)	If you selected Manual mode for IPv4, type the Subnet Mask for the interface.
Prefix (IPv6)	If you selected Manual mode for IPv6, type the prefix length for the interface.

Click the DNS tab, and then configure the following options:

Option	Description
Auto/Manual	Choose the appropriate mode: Select Auto to acquire DNS server addresses from a DHCP server. Select Manual to specify DNS servers.
Primary DNS	Specifies the IP address of the primary DNS server.
Secondary DNS	Specifies the IP address of the secondary DNS server.
Tertiary DNS	Specifies the IP address of an optional third DNS server.
DNS Search Path	Specifies one or more DNS search paths. Use a comma to separate each path.

Click the tab for the secondary interface, and then configure the IPV4 and IPV6 options.
Note: IP addresses are not assigned to an interface that is designated as the TCP reset interface for monitoring mode.

Optional: Click the Interface M.1 tab, and then configure the following options:

Option	Description
Enable M.1	Enables or disables this management interface.
Speed/Duplex	Sets the link speed and mode of the network adapters for the management interface: Auto: Automatically sets the best common mode the moment that the two interfaces are connected. This setting works for most environments. An exception is an environment with a switch or other network device that does not support auto-negotiation. Another exception is a case where the auto-negotiation process takes too long to establish a link. 10 MB Half Duplex: Devices that transmit or receive data at 10 megabits per second but not at the same time. 10 MB Full Duplex: Devices that transmit and receive data at 10 megabits per second in both directions at the same time. 100 MB Half Duplex: Devices that transmit or receive data at 100 megabits per second but not both at the same time. 100 MB Full Duplex: Devices that transmit and receive data at 100 megabits per second in both directions at the same time. 1000 MB Full Duplex: Devices that transmit and receive data at 1000 megabits per second in both directions at the same time.
Auto/Manual	Choose the appropriate mode: Select Auto to acquire an IP address from a DHCP server. Select Manual to specify a static IP address, Netmask, and Gateway (IPv4) or Prefix (IPv6).
Address	If you selected Manual mode, type the IP address that you want to use for the interface.
Gateway	If you selected Manual mode, type the Gateway for the interface.
Netmask (IPv4)	If you selected Manual mode for IPv4, type the Subnet Mask for the interface.
Prefix (IPv6)	If you selected Manual mode for IPv6, type the prefix length for the interface.

To enable more management interfaces, select Enable interface name on the related interface management tabs.
Click Save Configuration.