Enterasys ® Sentinel™ Trusted Access Gateway Appliance SNS-TAG-HPA / SNS-TAG-LPA Installation Guide P/N 9034297-01
Electrical Hazard: Only qualified personnel should perform installation procedures. Riesgo de electrocución: Solamente personal calificado debe realizar procedimientos de instalacion. Elektrische Spannung: Installationen sollten nur durch ausgebildetes und qualifiziertes Personal vorgenommen werden. Notice Enterasys Networks reserves the right to make changes in specifications and other information contained in this document and its web site without prior notice.
Regulatory Compliance Information Federal Communications Commission (FCC) Notice This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. NOTE: This equipment has been tested and found to comply with the limits for a class A digital device, pursuant to Part 15 of the FCC rules.
Electromagnetic Compatibility (EMC) This product complies with the following: 47 CFR Parts 2 and 15, ICES‐003, 89/336/EEC, EN 55022, EN 61000‐3‐2, EN 61000‐3‐3, EN 55024, AS/NZS CISPR 22, VCCI V‐3. Compatibilidad Electromágnetica (EMC) Este producto de Enterasys cumple con lo siguiente: 47 CFR Partes 2 y 15, ICES‐003, 89/336/EEC, EN 55022, EN 55024, EN 61000‐3‐2, EN 61000‐3‐3, AS/NZS CISPR 22, VCCI V‐3.
ѻક䇈ᯢк䰘ӊ Supplement to Product Instructions 䚼ӊৡ⿄ (Parts) 䞥ሲ䚼ӊ (Metal Parts) ⬉䏃ഫ (Circuit Modules) ⬉㓚ঞ⬉㓚㒘ӊ (Cables & Cable Assemblies) ล᭭㘮ড়⠽䚼ӊ (Plastic and Polymeric parts) ⬉䏃ᓔ݇ (Circuit Breakers) ƻ˖ 䪙 3E ᳝↦᳝ᆇ⠽䋼ܗ㋴ (Hazardous Substance) ⒈㘨㣃 ∲ 䬝 ݁Ӌ䫀 3%% +J &G &U h ƻ ƻ h ƻ ƻ h ƻ ƻ h ƻ ƻ h ƻ ƻ h ƻ ƻ ƻ ƻ ƻ ƻ ƻ h ƻ ƻ h h ƻ ƻ ⒈Ѡ㣃䝮 3%'( 㸼⼎䆹᳝↦᳝ᆇ⠽䋼䆹䚼ӊ᠔᳝ഛ䋼ᴤ᭭Ёⱘ䞣ഛ SJ/T 11363-2006 ᷛޚ㾘ᅮⱘ䰤䞣㽕∖ҹϟDŽ Indicates that the concentration of the hazardous substance
VCCI Notice This is a class A product based on the standard of the Voluntary Control Council for Interference by Information Technology Equipment (VCCI). If this equipment is used in a domestic environment, radio disturbance may arise. When such trouble occurs, the user may be required to take corrective actions. BSMI EMC Statement — Taiwan This is a class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures.
ENTERASYS NETWORKS, INC. FIRMWARE LICENSE AGREEMENT BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT. This document is an agreement (“Agreement”) between the end user (“You”) and Enterasys Networks, Inc.
Moldova, Mongolia, North Korea, the People’s Republic of China, Russia, Tajikistan, Turkmenistan, Ukraine, Uzbekistan, Vietnam, or such other countries as may be designated by the United States Government), (ii) export to Country Groups D:1 or E:2 (as defined herein) the direct product of the Program or the technology, if such foreign produced direct product is subject to national security controls as identified on the U.S.
13. SEVERABILITY. In the event any provision of this Agreement is found to be invalid, illegal or unenforceable, the validity, legality and enforceability of any of the remaining provisions shall not in any way be affected or impaired thereby, and that provision shall be reformed, construed and enforced to the maximum extent permissible. Any such invalidity, illegality, or unenforceability in any jurisdiction shall not invalidate or render illegal or unenforceable such provision in any other jurisdiction.
ENTERASYS NETWORKS, INC. SOFTWARE LICENSE AGREEMENT This document is an agreement (“Agreement”) between You, the end user, and Enterasys Networks, Inc. on behalf of itself and its Affiliates (“Enterasys”) that sets forth your rights and obligations with respect to the software contained in CD‐ROM or other media.
5. PROTECTION AND SECURITY. In the performance of this Agreement or in contemplation thereof, You and your employees and agents may have access to private or confidential information owned or controlled by Enterasys relating to the Licensed Materials supplied hereunder including, but not limited to, product specifications and schematics, and such information may contain proprietary details and disclosures.
9. UNITED STATES GOVERNMENT RESTRICTED RIGHTS. The Licensed Materials (i) were developed solely at private expense; (ii) contains “restricted computer software” submitted with restricted rights in accordance with section 52.227‐19 (a) through (d) of the Commercial Computer Software‐Restricted Rights Clause and its successors, and (iii) in all respects is proprietary data belonging to Enterasys and/or its suppliers.
xii
Contents About This Guide Intended Audience ............................................................................................................................................xv Associated Documents .....................................................................................................................................xv Conventions Used in This Guide ......................................................................................................................xv Getting Help ...
xiv
About This Guide This document describes the installation of the Enterasys Sentinel Trusted Access Gateway (TAG) SNS‐TAG‐HPA and SNS‐TAG‐LPA hardware appliances. Intended Audience This document is intended for experienced network administrators who are responsible for implementing and maintaining communications networks. Associated Documents • Enterasys Sentinel Trusted Access Manager Online Help.
Electrical Hazard: Warns against an action that could result in personal injury or death due to an electrical hazard. Riesgo de electrocución: Advierte contra una acción que pudiera resultar en lesión corporal o la muerte debido a un riesgo eléctrico. Elektrische Spannung: Warnung vor sämtlichen Handlungen, die zu Verletzung von Personen oder Todesfällen – hervorgerufen durch elektrische Spannung – führen können! Warning: Warns against an action that could result in personal injury or death.
1 Appliance Overview This chapter describes the components shipped with the appliance and appliance requirements. Kit Contents Your appliance kit includes the following components: • Appliance chassis (with attached front rack mount brackets) • One non‐redundant power supply • One power cord (U.S. version) • Mid‐mount rack mounting accessory kit • One USB flash drive Front Panel Controls and Indicators Figure 1‐1 shows the appliance front panel. Table 1‐1 describes the control button functions.
Appliance Back Panel Table 1-1 Control Button Functions Button Function Power Toggles the system power on/off. Reset Performs a soft system re-boot. UP/DOWN Displays configured appliance parameters on the LCD. • Appliance IP Address • Gateway IP Address • Appliance Network Mask • Management Server IP Address ENT Displays the installed TAG software version number on the LCD. ESC Displays “Enterasys Networks” on the LCD. Appliance Back Panel Figure 1‐2 shows the appliance back panel.
Power Supply Power Supply The 400 watt EPS PFC power supply voltage specifications are listed in Table 1‐2: Table 1-2 Power Supply Specifications Parameter Description Input voltage 100 to 125 Vac, 6 A, 50/60 Hz 200 to 240 Vac, 3 A, 50/60 Hz Output voltage • 5 V (3 A – 25 A) • 12 V (2 A – 28 A) • -5 V (0 A – 0.5 A) • -12 V (0 A – 0.5 A) • 3.3 V (1 A – 20 A) • +5 V standby (0.1 A – 2 A) Physical Specifications The physical specifications for the TAG appliance are listed in Table 1‐3.
Environmental Specifications Environmental Specifications Ensure that the environmental specifications are within the ranges described in Table 1‐4.
2 Installation This chapter describes how to install the TAG appliance into a rack. Refer to the Safety Information before you install the appliance into a rack. Safety Information Electrical Hazard: Servicing – Prior to servicing the equipment, disconnect all power supplies. Elektrische Spannung: Wartung – Vor der Ausführung von Wartungsarbeiten am Gerät muss das Gerät von allen Stromversorgungen getrennt werden. Riesgo de electrocución: Servicio.
Safety Information Warning: Refer to the following information: Warnung: Folgende Informationen sind zu beachten: Advertencia: Consulte la siguiente información: • Mechanical Loading: Mounting of the equipment in the rack or cabinet should be such that a hazardous condition is not achieved due to uneven mechanical loading.
Safety Information Warning: Refer to the following information: Warnung: Folgende Informationen sind zu beachten: Advertencia: Consulte la siguiente información: • Dispose of used batteries according to the instructions Enterasys recommends that you contact Technical Support at www.enterasys.com/services/support/contact/ for service. Gebrauchte Batterien oder Akkus sind gemäß den Vorschriften zu entsorgen. Enterasys empfiehlt, sich mit dem technischen Support unter www.enterasys.
Rack Mounting Rack Mounting This section describes how to install the TAG appliance into a rack. Rack mount options include: • Front mount • Front mount and mid‐mount Front Mount Figure 2‐1 shows the appliance front panel being attached to the rack.
Rack Mounting Mid-Mount The appliance ships with a mid‐mount accessory kit. Figure 2‐2 shows the appliance installed in a rack, with the front mount attached, and a mid‐mount placement example. To attach the appliance to the rack, perform the following steps: 1. Use the two mounting holes closest to the center of the appliance for more balanced mounting position. 2. Use the M4 screws (2 screws for each side) to secure the center mounting bracket to the appliance.
Rack Mounting 2-6 Installation
3 Configuration Once a TAG appliance is physically installed into a rack, you need to connect a monitor and a USB keyboard, connect the power cord and network cable, and power it on (see Figure 1‐1 and Figure 1‐2). Then, you must go through the initial configuration process described in this chapter. This chapter also includes information on how to change your appliance settings following your initial configuration, Changing Trusted Access Gateway Settings on page 3‐3.
Configure the Appliance 6. Select from the following, highlight OK, and press Enter. • static IP: uses a static IP address to configure Ethernet • DCHP: uses a DHCP server to configure Ethernet • loopback: used to set up a loopback connection (modem or no net) Note: Static IP is recommended; however, you must evaluate your network environment. The ENTER IP ADDRESS FOR “your host name” screen appears. 7. Enter the appliance IP address, highlight OK, and press Enter.
Changing Trusted Access Gateway Settings You are now ready to use Trusted Access Manager to manage your Trusted Access Gateway appliance. If this is your initial commissioning of the appliance, you can launch Trusted Access Manager and select Getting Started from the Trusted Access Manager Help pull‐down menu for information on using Trusted Access Manager to configure and manage your TAG appliance.
Changing Trusted Access Gateway Settings 3-4 Configuration
4 Upgrading Trusted Access Gateway Software This chapter describes the procedure to upgrade the Trusted Access Gateway software on the TAG appliance. You will need to connect a monitor and a USB keyboard to the TAG appliance prior to performing these steps. 1. Go to the Enterasys Networks web site to download the TAG.zip file to your system: http://www.enterasys.com/products/management/downloads 2. Extract the TAG.zip file to a directory on your system. 3.
4-2 Upgrading Trusted Access Gateway Software