Serial Access

This appendix presents instructions for using the serial utility menu. This appendix contains the following sections:

Overview

Use the serial utility menu available via the serial port on the Secure Content Accelerator to:

Reset the device to factory defaults if you have forgotten the configuration password or disabled access to the device via the remote management access list
Set the IP address and default gateway before putting the Secure Content Accelerator on the network
Set a secret passphrase for secure management sessions
Specify an encryption method for secure management sessions

To reload the configuration, you should have a copy of the configuration file created after the most recent Secure Content Accelerator configuration session.

Note If you lock yourself out of remote management by creating an access list that prevents a specific IP address from attaching to the device, you should not use a configuration file that may contain the access list to restore the previous configuration without editing it to remove the inappropriate access list entry. Open the file with any text editor and either edit the IP addresses in the access list or delete the lines associated with the access list. Then save the file. Upload the edited file once the Secure Content Accelerator has become accessible after using the serial configuration utility. The configuration information is stored in nonvolatile memory of the appliance and is retained even if the device is unplugged.

Running the Serial Configuration Utility

Follow these instructions to use the serial configuration utility:

1. Attach the null modem cable to the "CONSOLE" serial port on the device. Attach the other end of the null modem cable to a serial port on the configuring computer.

2. Launch any terminal application or emulator that communicates with the serial port you have connected to the appliance. Use these settings: 115,200 baud, 8 data bits, no parity, 1 stop bit, no flow control.

3. You may need to type Return until the serial configuration utility menu is displayed. (If the Secure Content Accelerator was powered up after the serial connection was made, the serial configuration utility menu is displayed without typing Return.)

: The following menu appears:

(1) Display Current IP Configuration
(2) Set IP address
(3) Set Default Gateway
(4) Set Secret for Secure Management
(5) Save current device parameters
(6) Clear Secret for Secure Management
(7) Set Encryption Method for Secure Management
(8) Reboot
(9) Reset Configuration to Factory Defaults
 
(S) Switch to single port operation
(D) Switch to dual port operation (default)

Type 1 to display the current Secure Content Accelerator IP configuration.

Type 2 to set the IP address on the Secure Content Accelerator. Enter the IP address and netmask when prompted.

Type 3 to set the default gateway for the device. Enter the IP address of the default gateway when prompted.

Type 4 to specify a secret phrase to protect network management.Enter and verify the passphrase. If a passphrase has been specified previously, you are asked to enter it before defining a new one.

Type 5 to save the current configuration.

Type 6 to clear a previously specified secret passphrase. Verify clearing the secret when prompted.

Type 7 to set the encryption method used to secure management sessions. The options are ARC4 (compatible with RC4), DES, and AES.

Type 8 to reboot the Secure Content Accelerator. The Secure Content Accelerator resumes operation using the configuration stored in the flash memory.

Type 9 to reset the device configuration to factory settings. This option removes all configuration information. You are prompted to continue with this reset.

Type S to switch the operation of the appliance to use a single Ethernet port for both secure SSL traffic and non-secure plain or clear text. All Ethernet traffic uses the port marked "Network". This mode of operation is designed to be used in conjunction with Layer 7 load balancers, such as the CSS. Additionally, Layer 7 switches must be configured to provide the filtering and security methods as the Secure Content Accelerator cannot prevent plain or clear text access to your server's secure data while in this mode. You must verify switching to single-port mode.
Type D to switch the operation of the appliance to use both Ethernet ports. This is the appliance's default operation.

After making changes to the device, type 5 to save the configuration, and simply exit the terminal application. Remove all serial cables.

Note When you have reset the device to factory defaults you may upload the configuration profile from a file generated by the write file command from a previous configuration session. If you had created an access list that prevented you from attaching to the device, you should edit the configuration file, as described above, before uploading it. See Appendi x D for information on using the write file and copy file configuration commands.

Table of Contents

Serial Access

Serial Access

Overview

Running the Serial Configuration Utility