3Com 6200 manual

December 2003 Security Switc h 6200 Har dwar e and Softw are  User s Guides FIBER 10/100/1000 10/100 CONSOLE (max) 9800,8,N,1 PACKET LINK 1357 2468 91 1 1 3 1 5 10 12 14 16 FIBER PACKET LINK 17 18 PWR MGMT1 MGMT2 SYS HDD[...]

Copyright © 2003, 3Com Cor poration. All rights reserved. No pa rt of this documentation may be reproduc ed in any form or by any means or used to make any deriv ative work (such as tran slation, transformation, or adaptation) wit h out written permission from 3Com Co rporati on. 3Com Corporation reserves the right to revise this documentatio n an[...]

3COM Security Switch 6200 Hardware and Software Users Guide Content s About this Guide Intended Audience ................ .......................... .......................... .................... v Conventions........ ...................... .......................... .......................... ................. v Related Documentation ..... ......[...]

3COM Security Switch 6200 Hardware and Software Users Guide 4 Configuring the Security Switch 6200 System Configuring System Parameters .......... .......................... .......................... . 4-2 Configuring User Accounts ...................... ......................... ........................ 4-5 Configuring the Network Time Protocol ([...]

3COM Security Switch 6200 Hardware and Software Users Guide B Connector Pin Assignments C Regulatory Information Regulatory Standards Compliance ............. .......................... ................... C-1 CE marking for the EEA (European Ec ono mic Area) . ....................... C-1 Safety ................... ....................... .........[...]

3COM Security Switch 6200 Hardware and Software Users Guide[...]

3COM Security Switch 6200 Hardware and Software Users Guide v About this Guide This guide describes how to install an d configure the 3COM Security Switch 6200 hardware and system software. The Secur ity Switch 6200 is based on the 3COM system so ftware and may be referred to as the system. Intended Audience This guide is intended for system inte g[...]

vi 3COM Security Switch 6200 Hardware and Software Users Guide About this Guide Related Document ation The following guides provid e additional instal lation and configuration information for the system. Security Switch 6200 Product Release Notes Install Server Installation and Configuration Guide Security Switch 6200 Applicati ons Guide Customer S[...]

3COM Security Switch 6200 Hardware and Software Users Guide 1-1 Introduction The Security Switch 6200 is a high pe rformance, turnkey security services switch that integrates best-in-cla ss firewall, virtual private networks, intrusion detection, and content security engines. The system offers high port density, high avail ability, and simpli city [...]

1-2 3COM Security Switch 6200 Ha rdware and Software Users Guide Introduction • One serial console port. • Two redundant, hot-swappable power su pplies. • Five expansion slots for optional VPN or other security acceleration cards. Chassis The chassis is front rack mountab le, in a standard 19 inch rack. Figure 1-1 displays the 6200 system’s[...]

3COM Security Switch 6200 Hardware and Software Users Guide 1-3 Introduction Management Options The system provides two sy stem management options: • First time startup interview • Configuratio n Tool First Time S tartup Interview The system uses a b uilt in, easy to co nfigure, interview too l (cos_interview) that allows you to quickly configu[...]

1-4 3COM Security Switch 6200 Ha rdware and Software Users Guide Introduction[...]

3COM Security Switch 6200 Hardware and Software Users Guide 2-1 Inst allation This chapter describes the system in stallation, covering the foll owing topics: • Pre-installation consid erations • Chassis installation • Interface connections Before Y ou Star t ! WA R N I N G : To ensure power connectivity, if you are using more than one power [...]

2-2 3COM Security Switch 6200 Ha rdware and Software Users Guide Installation Site Requirement s The system installation site should meet the following requirements: Shipment Check Using the packing sl ip as a reference, inspect package contents for missing or damaged items. If parts are missing or dama ged, call your 3COM Systems Support Represent[...]

3COM Security Switch 6200 Hardware and Software Users Guide 2-3 Installation Figure 2-1 3COM Security Switch 6200 Shipping Cont ent s NOTE: 3COM recom mends that you save the shipping contai ners in the event you need to s end back one or more components. FIBER 10/100/1000 10/100 CONSOLE (max) 9800,8,N,1 PACKET LINK 1 3 5 7 2 4 6 8 9 11 13 15 10 12[...]

2-4 3COM Security Switch 6200 Ha rdware and Software Users Guide Installation Additional Equipment • PC running RedHat Linux 6.2 or gr eater software. T his software is used to support the Security Switch 6200 Graphical User Interfa ce (GUI) and for hostin g the Check Point™ FireWall-1 ® Management Server. • PC running WinNT4/Win 2K software[...]

3COM Security Switch 6200 Hardware and Software Users Guide 2-5 Installation T erminal or PC A VT-100 terminal or a Personal Computer (PC) is required during installation. The terminal or PC is connected to the chassis’s craft port, allowing you to monitor start-up diag nostics and to configure the unit for remote management access. Chassis Rack [...]

2-6 3COM Security Switch 6200 Ha rdware and Software Users Guide Installation T abletop Mounting The system can be mounted on any desk or tabl e top. To do this you first need to attach the four rubber feet, supplied with the system, to the bottom of the box. To do this, co mplete the following: 1. Turn the system over onto its top with the bottom [...]

3COM Security Switch 6200 Hardware and Software Users Guide 3-1 Interface Connections and First T ime S t art-Up This chapter describes the procedure for powering up the system for the first time. Specifically cove red are the following: • Connecting to the Management Console • Powering Up the Sy stem • First ti me configur ation Making Conne[...]

3-2 3COM Security Switch 6200 Ha rdware and Software Users Guide Interface Connections and First T ime S t art-Up To connect to the serial connector use the DB9 serial connector located on the front pane l of the system. NOTE: If you are connecting to the system Management Console using a terminal or PC, the serial po rt on the terminal or PC must [...]

3COM Security Switch 6200 Hardware and Software Users Guide 3-3 Interface Connections and First T ime S t art-Up Connecting Remotely To access the system remotely: 1. Connect one end of an RJ45-to-RJ45 cabl e into a remote access device. 2. Connect the other end into the Mana ge ment port. Figure 3-2 shows the Management port module connected to a [...]

3-4 3COM Security Switch 6200 Ha rdware and Software Users Guide Interface Connections and First T ime S t art-Up 2. Attach the male end of the power cable into an AC power sour ce. The system is powered up when power is applied to th e power supplies. NOTE: If the system is powered up wi th one power supply or if one of the power supplies experi e[...]

3COM Security Switch 6200 Hardware and Software Users Guide 3-5 Interface Connections and First T ime S t art-Up POST Error Beep Codes The following tables list POST erro r beep codes. Befo re system video initializati on, the BIOS and BMC use th ese beep codes to inform users on error conditions. BMC Generated POST Beep Codes BIOS Generated POST E[...]

3-6 3COM Security Switch 6200 Ha rdware and Software Users Guide Interface Connections and First T ime S t art-Up[...]

3COM Security Switch 6200 Hardware and Software Users Guide 3-7 Interface Connections and First T ime S t art-Up POST Memo ry Error 3-Be ep Codes Beep Code Debug port 80h error Codes Daignostic LED Decoder Meanings G=Green, R=Red, A=Amber Hi Low 3 00h Off Off Off Off No memory was found in the system 3 01h Off Off Off G Memory mixed ty pe detected [...]

3-8 3COM Security Switch 6200 Ha rdware and Software Users Guide Interface Connections and First T ime S t art-Up First T ime Star t up The system uses a b uilt in, easy to configure, interview script that allows you to quickly config ure your system for basic opera tions. Once you have completed this interview, you can use the system Configuratio [...]

3COM Security Switch 6200 Hardware and Software Users Guide 3-9 Interface Connections and First T ime S t art-Up Please provide the date in "Mon DD YYYY" format, where Mon : month in the form Jan, Feb, etc. DD : day of month (1 - 31), YYYY: for example 2002 Enter the Date : 3. Define the Time Zone. Select a time zone based on the location[...]

3-10 3COM Security Switch 6200 Hardware and Software Users Guide Interface Connections and First T ime S t art-Up 4. Select a region. 1) Eastern Time 2) Eastern Time - Michigan - most locations 3) Eastern Time - Kentucky - Louisville area 4) Eastern Time - Kentucky - Wayne County 5) Eastern Standard Time - Indiana - most locations 6) Eastern Standa[...]

3COM Security Switch 6200 Hard ware and Software Use rs Guide 3-11 Interface Connections and First T ime S t art-Up SNMP Communities ================ Community Address Netmask Access middle 10.1.1.22 255.255.255.255 read-write Add the SNMP Communities <Y or N>[N]: 7. Configure the individua l user accounts. Accounts Configuration ============[...]

3-12 3COM Security Switch 6200 Hardware and Software Users Guide Interface Connections and First T ime S t art-Up Enter choice. Enter choice <1 - 20, X>[X]: Enter IP Address [0.0.0.0/0]: 9. Configure all addi tional interfaces. Continue configuring interfaces <Y or N>[N]: Enter choice. 1) fastethernet 1 2) fastethernet 2 3) fastethernet[...]

3COM Security Switch 6200 Hard ware and Software Use rs Guide 3-13 Interface Connections and First T ime S t art-Up 11. Configure NTP to achieve time synchroniza tion. Synchronizing the system’s clock with an accurate source is important for proper correlation of security events. The system uses the Network Time Protocol (NTP) to achieve time syc[...]

3-14 3COM Security Switch 6200 Hardware and Software Users Guide Interface Connections and First T ime S t art-Up[...]

3COM Security Switch 6200 Hardware and Software Users Guide 4-1 Configuring the Security Switch 6200 System The system uses a menu driven co nf iguration interface (cos _config) for configuration purposes. This t ool suppor ts adding, modify ing, or deleti ng any of the system config uratio n parameters. This configuration interfac e is launched fr[...]

4-2 3COM Security Switch 6200 Ha rdware and Software Users Guide Configuring the Security Switch 6200 System Configuration ========= 1) System Parameters 2) User Accounts 3) Network Time Protocol (NTP) 4) Domain Name Service (DNS) 5) Simple Network Management Protocol (SNMP) 6) Physical Interfaces 7) Tap Interfaces 8) Network Interfaces 9) IP Alias[...]

3COM Security Switch 6200 Hardware and Software Users Guide 4-3 Configuring the Security Switch 6200 System 2. To change any of the system param eters enter y, or press the Return key to leave system parameters unchanged. Enter the System Host Name [ hostname ]: Enter the System Domain Name []: Enter the Time [15:28:40]: Enter the Date [Apr 07 2003[...]

4-4 3COM Security Switch 6200 Ha rdware and Software Users Guide Configuring the Security Switch 6200 System 4. Select a region. 1) Eastern Time 2) Eastern Time - Michigan - most locations 3) Eastern Time - Kentucky - Louisville area 4) Eastern Time - Kentucky - Wayne County 5) Eastern Standard Time - Indiana - most locations 6) Eastern Standard Ti[...]

3COM Security Switch 6200 Hardware and Software Users Guide 4-5 Configuring the Security Switch 6200 System Configuring User Account s Each system user is defined by the user’s name, password, and access level. Collectively, these properties define ea ch user’s profile. Login access allows you to login into the unix shel l, setting this to dis [...]

4-6 3COM Security Switch 6200 Ha rdware and Software Users Guide Configuring the Security Switch 6200 System Configuring the Network T ime Protocol (NTP) The Network Time Protocol (NTP) is used to synchronize the time of a computer client or server to another serv er or reference time source, such as a radio or satellite receiver or modem. It provi[...]

3COM Security Switch 6200 Hardware and Software Users Guide 4-7 Configuring the Security Switch 6200 System 2) DNS Search Domains X) Exit Enter choice <1 - 2, X>[X]: 2 DNS Search Domains ================== Modify the DNS Domain Search List <Add, Delete or eXit>[eXit]: a Enter DNS Search Domain []: 3com.com DNS Search Domains ===========[...]

4-8 3COM Security Switch 6200 Ha rdware and Software Users Guide Configuring the Security Switch 6200 System etc/snmp/snmp.local.conf)]: srhen@crossbeamsys.com Enter SNMP Location [Unknown (edit /etc/snmp/ snmpd.conf)]: Lab SNMP configuration ================== 1) SNMP Server 2) Communities 3) Trap Destinations X) Exit Enter choice <1 - 3, X>[...]

3COM Security Switch 6200 Hardware and Software Users Guide 4-9 Configuring the Security Switch 6200 System SNMP Communities ================ Change the SNMP Communities <Add, Delete or eXit>[eXit]: a Enter Community Name []: public Enter IP Source Addresses [0.0.0.0/32]: 10.0.0.0/8 Enter Access Mode <read-only, read-write>[read-only]: [...]

4-10 3COM Security Switch 6200 Hardware and Software Users Guide Configuring the Security Switch 6200 System SNMP Traps ========== Change the SNMP Trap Destinations <Add, Delete, Modify or eXit>[eXit]: 7. Enter the desired option or enter X to return t o SNMP Configuration Menu. SNMP configuration ================== 1) SNMP Server 2) Communit[...]

3COM Security Switch 6200 Hard ware and Software Use rs Guide 4-11 Configuring the Security Switch 6200 System Modify Physical Interface Parameters <y or n>[n]: 2. Enter y to modify a physical interfac e or n to return to the main menu. For example: Modify Physical Interface Parameters <y or n>[n]: y Enter the Interface Name [fastethern[...]

4-12 3COM Security Switch 6200 Hardware and Software Users Guide Configuring the Security Switch 6200 System Modify Physical Interface Parameters <Y or N>[N]: 3. Enter y to modify additional physica l interfaces or n to return to the main menu. Configuring T a p Interfaces Tap interfaces are used to copy th e input and output packets from a p[...]

3COM Security Switch 6200 Hard ware and Software Use rs Guide 4-13 Configuring the Security Switch 6200 System Configuring Network Interfaces A network interface associates an IP address with a physical connection and optionally a VLAN id. To co nfigure network in terfaces: 1. Select Option 8 from the main menu. IP Interfaces ============= 2. To ad[...]

4-14 3COM Security Switch 6200 Hardware and Software Users Guide Configuring the Security Switch 6200 System IP Interfaces ============= Modify the IP Interfaces <Add, Delete, Modify or eXit>[eXit]: 4. Enter the desired option to add, dele te, or modify additional network interfaces or enter x to return to the main menu. Configuring IP Aliase[...]

3COM Security Switch 6200 Hard ware and Software Use rs Guide 4-15 Configuring the Security Switch 6200 System IP Aliases ========== Modify the IP Aliases <Add, Delete, Modify or eXit>[eXit]: a Enter Interface [fastethernet 1]: VLAN Interface <Y or N>[N]: y Enter VLAN ID <1 - 4095>: 100 Enter IP Address [0.0.0.0]: 128.205.2.24 Ent[...]

4-16 3COM Security Switch 6200 Hardware and Software Users Guide Configuring the Security Switch 6200 System Configuring S t atic Routes Static IP routes are user-defined rout es that cause pa ckets moving between a source and a destination to take a specific path. To configure Static Routes: 1. Select Option 10 from the main menu. Static Routes ==[...]

3COM Security Switch 6200 Hard ware and Software Use rs Guide 4-17 Configuring the Security Switch 6200 System Configuring S t atic ARP Entries You define static Address Resolution Protocol (ARP) entries by relating an IP address to a MAC address. To configure static ARP entries: 1. Select Option 11 from the main menu. Static ARP Entries ==========[...]

4-18 3COM Security Switch 6200 Hardware and Software Users Guide Configuring the Security Switch 6200 System Configuring the Virtual Router Redundancy Protocol (VRRP) The Virtual Router Redundancy Protocol (VRRP) dynamically assigns responsibility for one or more virtual routers to the VRRP route rs on a LAN, allowing se veral routers on a multia c[...]

3COM Security Switch 6200 Hard ware and Software Use rs Guide 4-19 Configuring the Security Switch 6200 System VRRP Configurations =================== 2. Enter the desired option to add, de lete, or modify a VRRP entry or enter x to return to the main menu. For exam ple: Modify the VRRP Configuration <Add, Delete, Modify or eXit>[eXit]: m Ent[...]

4-20 3COM Security Switch 6200 Hardware and Software Users Guide Configuring the Security Switch 6200 System Enter VRRP ID [0]: 2 Enable <disabled, enabled>[disabled]: Enter Interface [management 0]: fastethernet 1 VLAN Interface <Y or N>[N]: y Enter VLAN ID <1 - 4095>: 100 Enable VRRP MAC <disabled, enabled>[disabled]: enab[...]

3COM Security Switch 6200 Hard ware and Software Use rs Guide 4-21 Configuring the Security Switch 6200 System Exiting from the Configuration To o l To exit from the system Configure Tool , select Option X from the main menu. Enter choice <1 - 12, X>[X]: X Saving Y our System Configuration To save your con figuration, at the admin prompt, use[...]

4-22 3COM Security Switch 6200 Hardware and Software Users Guide Configuring the Security Switch 6200 System address="10.1.1.50" ></data> </dns_server> <dns_search> <data domainname="3com.com" ></data> </dns_search> <snmp_server> <data enable="enabled" contact="lab@3[...]

3COM Security Switch 6200 Hard ware and Software Use rs Guide 4-23 Configuring the Security Switch 6200 System <ip_interface> <data ifname="management 1" address="192.168.10.6" ></data> <data ifname="fastethernet 1" address="128.205.1.23" mask="255.255.255.0" ></data> &[...]

4-24 3COM Security Switch 6200 Hardware and Software Users Guide Configuring the Security Switch 6200 System ip_addr="128.205.1.31" mac_addr="00:00:a2:00:00:03" ></data> </static_host> <account> <data username="admin" shell="enabled" access_level="Administrator" ></data[...]

3COM Security Switch 6200 Hard ware and Software Use rs Guide 4-25 Configuring the Security Switch 6200 System ></data> </vrrp> Restoring the system to Factory Default Settings To delete the current co nfiguration and return the system to its factory defaults, use the following co mmand at the admin prompt. NOTE: The IP address of in[...]

4-26 3COM Security Switch 6200 Hardware and Software Users Guide Configuring the Security Switch 6200 System[...]

3COM Security Switch 6200 Hardware and Software Users Guide 5-1 Upgrading the System Sof tware This chapter describes how to update your 3COM Security Switch 6200 system software. Upgrading the System Sof tware If you are upgrading your system from a previously configu red release, you do not need to use the full system softwa re. Instead, you can [...]

5-2 3COM Security Switch 6200 Ha rdware and Software Users Guide Upgrading the System Software 7. Once the above command completes, enter the following command at the root promp t: chmod 700 cos-upgradepack-ocode- AZZZ-Y.Y.Y-Y-X.X.X- X .shar 8. Once the above command completes, enter the following command at the root promp t: ./cos-upgradepack-ocod[...]

3COM Security Switch 6200 Hardware and Software Users Guide 6-1 Upgrading the System Sof tware Using the Safe Upgrade and Rollback Features Your system ships with two disk parti tions, one partition is us ed for the current runtime (RP) version of softwa re and the other partition is for the upgraded (UP) version of software. Each partition pr ovid[...]

6-2 3COM Security Switch 6200 Ha rdware and Software Users Guide Upgrading the Sys tem Softwa re Using the Safe Upgrade and Rollback Features /dev/ataraid/d0p2 14 79 530145 82 Linux swap /dev/ataraid/d0p5 80 882 6450097 83 Linux # / /dev/ataraid/d0p6 883 2070 9542609+ 83 Linux # /opt /dev/ataraid/d0p7 2071 2435 2931862 83 Linux # /var 4. Duplicate [...]

3COM Security Switch 6200 Hardware and Software Users Guide 6-3 Upgrading the Sys tem Softwa re Using the Safe Upgrade and Rollback Features Upgrading from V ersion 2.1 and Greater Newer versions of Version 2.1 and greate r allow you to do a full copy of the Running Partition (RP) to an Upgrade Partition (UP) before actua lly upgrading your system [...]

6-4 3COM Security Switch 6200 Ha rdware and Software Users Guide Upgrading the Sys tem Softwa re Using the Safe Upgrade and Rollback Features Upgrading from Sof tware to a UP While an RP is Operational (Rollback) Newer versions than 2.1 and greater allo w you to install th e system software to a UP while an RP is operational. This is done using /us[...]

3COM Security Switch 6200 Hardware and Software Users Guide 7-1 T echnical Support 3Com provides easy access to tec hnical sup port information through a variety of services. This chap ter describes these services. Information contained in thi s chapter is correct at time of publication. For the most recent information, 3Com recommends that you acc[...]

7-2 3COM Security Switch 6200 Ha rdware and Software Users Guide T echnical Support 3Com Knowledgeb ase We b Services The 3Com Knowledgebase is a database of technical information to help you install, upgrade, configure , or support 3Com products. The Knowledgeb ase is updated daily with technical information discovered by 3Com technical support en[...]

3COM Security Switch 6200 Hardware and Software Users Guide 7-3 T echnical Support Support from 3Com If you are unable to obtain assistan ce from the 3Com online technical resources or from your ne twork suppli er, 3Com off ers email and telephone technical support services . To find out more abou t your support options, email or call the 3Com tech[...]

7-4 3COM Security Switch 6200 Ha rdware and Software Users Guide T echnical Support Telephone Support Numbers Country T e lephone Number Country T elephone Number Asia, Pacific Rim Australia India Indonesia Malaysia New Zealand Pakistan Philippines Singapore S. Korea Taiwan Thailand 1 800 678 515 +61 2 9424 5179 or 000800 6501111 001 803 61 009 180[...]

3COM Security Switch 6200 Hardware and Software Users Guide 7-5 T echnical Support Latin America From the Caribbean, Central and Sou th America, call: Antigua Argentina Aruba Bahamas Barbados Belize Bermuda Bonaire Brazil Cayman Chile Colombia Costa Rica Curacao Ecuador Dominican Republic Guatemala Haiti Honduras Jamiaca Martinique Mexico Nicaragua[...]

7-6 3COM Security Switch 6200 Ha rdware and Software Users Guide T echnical Support Returning Product s for Rep air Before you send a product directly to 3Com for repair, you must fi rst obtain an authorizatio n number. Products sent to 3Com without authorization numbers will be returned to the send er unopened, at the sender's expense. You ca[...]

3COM Security Switch 6200 Hardware and Software Users Guide 7-7 T echnical Support Latin America Antigua Argentina Aruba Bahamas Barbados Belize Bermuda Bonaire Brazil Cayman Chile Colombia Costa Rica Curacao Ecuador Dominican Republic Guatemala Haiti Honduras Jamiaca Martinique Mexico Nicaragua Panama Paraguay Peru Puerto Rico Salvador Trinidad an[...]

7-8 3COM Security Switch 6200 Ha rdware and Software Users Guide T echnical Support[...]

3COM Security Switch 6200 Hardware and Software Users Guide A-1 A T echnical Specifications This appendix list s the physical, enviro nmental, and power characteristics of the 3COM Security Switch 6200. Physical Characteristics Size (Inches): 3.5 H x 17.5 W x 25 .5 D Weight: approxi mately 32 lbs Environment al Characteristics Operating Temperature[...]

A-2 3COM Security Switch 6200 Ha rdware and Software Users Guide T echnic al S pecifications[...]

3COM Security Switch 6200 Hardware and Software Users Guide B-1 B Connector Pin Assignment s This appendix describes the craft port pin assignments: The Craft port, loca ted on the front of the system, uses a DB- 9 conn ector with the foll owing pin identifi cations and associated signals. DB-9 Connector Pin Number Signal 1 No Connection 2 TDX 3 RX[...]

B-2 3COM Security Switch 6200 Ha rdware and Software Users Guide Connector Pin Assignment s[...]

3COM Security Switch 6200 Hardware and Software Users Guide C-1 C Regulatory Information This appendix provides the fo llowing compliance statements: • Regulatory Standards Compliance • Radio Frequency Interfere nce • VCCI Statement Regulatory S t andards Compliance The following regulatory ag encies have approved the 3COM Security Switch 620[...]

C-2 3COM Security Switch 6200 Ha rdware and Software Users Guide Regulatory Informatio n EMI Compliance Radio Frequency Interference NOTE In accordance with FCC Part 15 Subpart B requirements, changes or modifications made t o this equipmen t not expressly approv ed by 3COM Corporation could void the user’s au thority to operate this equipment. T[...]