HP VPN Firewall Appliances Getting Started Guide

To log in to the firewall module from the network device:

Task Command

Remarks

from the network device.

• In standalone mode:

oap connect slot slot-number

• In IRF mode:

oap connect chassis chassis-number slot

slot-number

Available in user view of the

network device (switch or

router).

After login, the terminal screen displays the CLI of the firewall module. To return to the CLI on the device,

press Ctrl+K.

Monitoring and managing the firewall module on

the network device

Resetting the system of the firewall module

CAUTION:

The reset operation might cause data loss and service interruption. Before performing this operation, save

the configurations of the firewall module operating system and shut down the firewall module operatin

system to avoid service interruption and data loss.

If the operating system of the firewall module is not operating correctly (for example, the system does not

respond), you can reset the system with the following command. This operation is the same as resetting

the firewall module by pressing the reset button on the firewall module.

The firewall module has an independent CPU. The network device can still recognize and control the

firewall module when you reset the system of firewall module.

To reset the system of the firewall module:

Task Command

Remarks

Reset the system of the

firewall module

• In standalone mode:

oap reboot slot slot-number

• In IRF mode:

oap reboot chassis chassis-number slot slot-number

Available in user

view.

Configuring the management IP address of the firewall module

From the OAA perspective, the firewall module and the device are integrated, and they function as one

device. For an SNMP UDP domain-based NMS, however, the firewall module and the device are

independent SNMP agents. Physically, the two agents reside on the same managed object. Logically,

they belong to two different systems and manage their respective MIB objects.

To use an NMS to manage the firewall module and the device from the same user interface, you must first

obtain the management IP addresses of the two SNMP agents and guarantee the connectivity between

the two management IP addresses.