Page 2 - Copyright; Trademarks
Copyright Copyright © 2000 Intel Corporation. All Rights Reserved. This User Guide as well as the software described in it is furnished under license and may only be used or copied in accordance with the terms of the license. The information in this manual is furnished for informational use only, is...
Page 3 - Table of Contents; Chapter 1: Introduction
Table of Contents Chapter 1: Introduction About this User Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1New in This Release . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2Who Should Use thi...
Page 4 - Chapter 3: Theory of Operation
C O N T E N T S Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide iv Network and Server LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-4Inline LED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...
Page 5 - Chapter 4: Scenarios
Table of Contents v Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-21 Automapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-21Automapping with user-specified key and cer...
Page 6 - Chapter 6: Remote Management
C O N T E N T S Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide vi Command Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6Command Reference. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ...
Page 7 - Chapter 7: Alarms and Monitoring
Table of Contents vii Specifying SNMP Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-18Community String . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-19Trap Community String . . . . . . . . . . . . . . . . . . . . . ....
Page 9 - List of Figures
List of Figures Mounting Bracket Orientation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2Wiring Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3Front Panel Connectors and LEDs . . . . . . . . . ...
Page 11 - Introduction; About this User Guide
Introduction Congratulations on your choice of the Intel® NetStructure™ 7110/7115 e-Commerce Accelerator. The processing of secure transactions through Secure Socket Layer (SSL) can occupy up to 90% of even the largest servers’ CPU power and can degrade response time significantly. The 7110/7115 pro...
Page 12 - New in This Release
C H A P T E R 1 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 1-2 New in This Release New features in the Intel® NetStructure™ 7110/7115 e-Commerce Accelerator include: • Improved performance: Threefold increase in SSL connections processed per second—from 200 to 600 (7115 only) •...
Page 13 - Who Should Use this Book
C H A P T E R 1 Who Should Use this Book 1-3 • Monitoring: Users can now configure the 7110/7115 to send periodic multi-status reports to the administration console or a remote management session (Telnet and SSh). Monitor reports include such information as: • Inline/bypass mode • Failsafe/failthrou...
Page 14 - How to Use this Book
C H A P T E R 1 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 1-4 How to Use this Book The information in this book is organized as follows: • Chapter 1: Introduction provides an introduction and overview of the 7110/7115, and a summary of new features. • Chapter 2: Installation a...
Page 16 - Notes
C H A P T E R 1 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 1-6 Notes
Page 17 - Before You Begin
Installation and Initial Configuration Intel® NetStructure™ 7110/7115 e-Commerce Accelerator installation and initial configuration instructions are in this chapter. Before You Begin WARNING: Do not remove the cover. There are no user-servicable parts inside. Before you begin installation, you need ...
Page 18 - Rack Installation
C H A P T E R 2 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 2-2 Installing the 7110/7115 Free-Standing or in a Rack The Intel® NetStructure™ 7110/7115 e-Commerce Accelerator is physically installed in either of two ways: • In a standard 19” rack, cantilevered from the provided m...
Page 19 - Free-Standing Installation
C H A P T E R 2 Installing the 7110/7115 Free-Standing or in a Rack 2-3 3. Position the 7110/7115 in the desired space of your 19” rack and attach the front flange of each mounting bracket to the rack with two screws each. (Rack-mounting screws are not provided.) Free-Standing Installation 1. Attach...
Page 20 - Status Check; Network and Server LEDs; Admin Terminal Connection
C H A P T E R 2 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 2-4 Status Check Before proceeding to the PC Initialization section, take a moment to verify that the 7110/7115 is correctly connected. Network and Server LEDs Verify that the Network and Server LEDs are both illuminate...
Page 21 - HyperTerminal§ Paste Operations
C H A P T E R 2 Installing the 7110/7115 Free-Standing or in a Rack 2-5 2. Type an appropriate name in the Name field of the Connection Description window (e.g., “Configuration”), and then click the OK button. The Phone Number panel appears. 3. In the Connect Using… field specify “Direct to COM1” (o...
Page 22 - Troubleshooting; Server and Network LEDs; Continuing Configuration
C H A P T E R 2 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 2-6 Troubleshooting Server and Network LEDs If either the Network or Server LED fails to illuminate using either straight-through or crossover network cables, the problem may be elsewhere in the network. Verify by wirin...
Page 23 - Theory of Operation; Security
Theory of Operation Security New in the Intel® NetStructure™ 7110/7115 e-Commerce Accelerator is Remote Management capability. This feature requires that the 7110/7115’s network interface be assigned an IP address, thus security becomes a matter for your attention. If you intend to manage your 7110/...
Page 24 - Multiple Servers
C H A P T E R 3 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 3-2 Ideally, the 7110/7115 is located in the same rack as the server, separated by a short distance. . Figure 3-1: 7110/7115 in Single Server Configuration Multiple Servers Given the SSL processing power of the 7110/711...
Page 27 - Availability; Keys and Certificates
C H A P T E R 3 Keys and Certificates 3-5 7110/7115 on the server side can also be enabled to spill to the server. Spilling is performed dynamically on a connection-by-connection basis. (See spill command, Chapter 5, “Command Reference.”) If spill is disabled, the 7110/7115 “throttles,” that is, wil...
Page 28 - Cutting and Pasting with HyperTerminal§
C H A P T E R 3 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 3-6 There are three ways to obtain keys and certificates: • Obtaining a certificate from VeriSign§ or other certificate authority • Using an existing key/certificate • Creating a new key/certificate on the 7110/7115 Cut...
Page 29 - Procedure
C H A P T E R 3 Keys and Certificates 3-7 Obtaining a Certificate from VeriSign§ or Other Certificate Authority Use the create key command to create your key and the create sign command to create a signing request to be sent to VeriSign or other certificate authority for authentication. The certific...
Page 33 - Apache SSL§
C H A P T E R 3 Keys and Certificates 3-11 Apache SSL§ For key: 1. Look in $APACHESSLROOT/conf/httpd.conf for location of *.key file. 2. Copy and paste the key file. For certificate: 1. Look in $APACHESSLROOT/conf/httpd.conf for location of *.cert file. 2. Copy and paste the certificate file.
Page 34 - Stronghold§
C H A P T E R 3 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 3-12 Stronghold§ For key: 1. Look in $STRONGHOLDROOT/conf/httpd.conf for location of *.key file. 2. Copy and paste the key file. For certificate: 1. Look in $STRONGHOLDROOT/conf/httpd.conf for location of *.cert file. 2...
Page 37 - Global Site Certificates; Overview
C H A P T E R 3 Keys and Certificates 3-15 4. Save the configuration when the server has been mapped. Intel 7115> config save Saving configuration to flash... Configuration saved to flash Intel 7115> Global Site Certificates Overview Four types of certificates are involved in the following dis...
Page 38 - Global Site Certificate Paste Procedure
C H A P T E R 3 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 3-16 A global site certificate is validated by an accompanying intermediate CA certificate. (Such pairs are called “chained certificates.”) Examples of intermediate CA certificates include Microsoft SGC Root§, and VeriS...
Page 40 - Client Authentication
C H A P T E R 3 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 3-18 Intel 7115> list map Map Net Ser Cipher Re- Client ID KeyID Server IP Port Port Suites direct Auth == ===== ========= ==== ==== ====== ===== ==== 1 default Any 443 80 all(v2+v3) n n 2 sample 10.1.2.5 443 80 med(...
Page 43 - SSL Processing; Mapping; Automapping
C H A P T E R 3 SSL Processing 3-21 SSL Processing The Intel® NetStructure™ 7110/7115 e-Commerce Accelerator handles several SSL protocols, for example, HTTPS (which is the default). For security purposes, you can block access to specified IPs or ports (see “Blocking” section). Traffic that is not m...
Page 45 - Combining automapping and manual mapping; Blocking; Specific IP, Specific Port
C H A P T E R 3 SSL Processing 3-23 Combining automapping and manual mapping NOTE: If both manual mappings and applicable automappings are available, the 7110/7115 always uses the manual mapping. Any combination of automapping and manual mapping entries, up to a total of 1000, can be used provided t...
Page 46 - Subnet IP, Specific Port; All IPs, Specific Port
C H A P T E R 3 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 3-24 Subnet IP, Specific Port To block a subnet IP, and specific port combination: 1. Type a subnet IP address, using 0 as the final octet. (In the exam- ple below, all IPs from “10.1.x.x” to “20.1.x.x” are blocked on p...
Page 47 - Delete a Block
C H A P T E R 3 SSL Processing 3-25 Example: Intel 7115> create block Client IP to block [0.0.0.0]: <enter> Client IP mask [0.0.0.0]: <enter> Server IP to block [0.0.0.0]:<enter> Server IP mask [0.0.0.0]:<Enter> Server Port to block: 80 Server Port mask [0xffff]:<Enter&...
Page 49 - Scenarios
Scenarios This section contains scenarios illustrating examples of Intel® NetStructure™ 7110/7115 e-Commerce Accelerator configurations: • Scenario 1: Single server • Scenario 2: Multiple servers • Scenario 3: Multiple 7110/7115s, cascaded • Scenario 4: Different ingress and egress routers
Page 50 - Syntax
C H A P T E R 4 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 4-2 Syntax The CLI uses the following syntax: Symbol Significance Angled brackets (< >) Angled brackets designate where you type variable parameters. Straight brackets ([ ]) Choices of parameters appear between st...
Page 51 - Scenario 1—Single Server; Procedure for Scenario 1; Manual Configuration
C H A P T E R 4 Scenario 1—Single Server 4-3 Scenario 1—Single Server This scenario describes a typical configuration of a 7110/7115 with one server, using either automapping or manual configuration/mapping. This scenario describes the fastest way to get up and running with a 7110/7115. Figure 4-1: ...
Page 53 - Scenario 2—Multiple Servers; Procedure for Scenario 2
C H A P T E R 4 Scenario 2—Multiple Servers 4-5 Scenario 2—Multiple Servers This scenario shows how to configure two or more servers. Figure 4-2: Single 7110/7115, Multiple Server Installation Procedure for Scenario 2 1. Perform the installation as described in Chapter 2. Access the 7115 command pro...
Page 55 - Assumptions
C H A P T E R 4 Scenario 3—Multiple 7110/7115s, Cascaded 4-7 8. Save the configuration when mapping is completed for the server(s). Intel 7115>config save Saving configuration to flash... Configuration saved to flash Intel 7115> Scenario 3—Multiple 7110/7115s, Cascaded This scenario shows how ...
Page 56 - Procedure for Scenario 3
C H A P T E R 4 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 4-8 Figure 4-3: Multiple (Cascaded) 7110/7115s Procedure for Scenario 3 1. Configure the 7110/7115 farthest from the server as described in any of the preceding scenarios. Remain connected to that specific 7110/7115 for...
Page 58 - Procedure for Scenario 4
C H A P T E R 4 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 4-10 Scenario 4—Different Ingress and Egress Routers This scenario describes the configuration of a 7110/7115 when the ingress and egress traffic paths are different. This scenario includes: • One or more servers • One ...
Page 59 - Command Reference; Online Help
Command Reference The Intel® NetStructure™ 7110/7115 e-Commerce Accelerator is fully configurable through the Command Line Interface (CLI). The CLI is accessible through the console and aux console RS232 ports. Online Help The 7110/7115 provides online help with the following options: • Type help to...
Page 60 - Command Line Interface; User Authentication; Abbreviation to Uniqueness
C H A P T E R 5 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 5-2 Command Line Interface The CLI handles all user interactions on the console and auxiliary console RS232 ports. One instance per port runs at all times. User Authentication To gain access to the CLI, the user must fi...
Page 62 - Input Editing Commands; Moving the Insertion Point
C H A P T E R 5 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 5-4 Input Editing Commands Moving the Insertion Point Command History A history of recently executed commands is stored in a buffer and can be accessed with the following commands: Command Description ctrl-b Move back o...
Page 63 - Cut and Paste
C H A P T E R 5 Command Line Interface 5-5 Cut and Paste Command Description ctrl-d Delete the character underneath the cursor. ctrl-k Delete the text from the current cursor position to the end of the line. ctrl-u Delete backward from the cursor to the beginning of the current line. ctrl-w Delete t...
Page 64 - Command Summary
C H A P T E R 5 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 5-6 Command Summary This section contains a high-level view of the 7110/7115’s command structure. Details appear in the next section, Command Reference. Command Command Options bypass config save defaultcomparereset cre...
Page 69 - Help Commands
C H A P T E R 5 Command Reference 5-11 Command Reference Help Commands Status Command Command Description help Display the list of available commands. help <command> Display usage for a single command. help usage Display all commands and their usage. tty_char View the available list of keyboar...
Page 70 - SSL Commands
C H A P T E R 5 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 5-12 SSL Commands Command Description create key Create a new keypair and associate it with a Key ID. Example: Intel 7115> create keyKey strength (512/1024) [512]: 1024New keyID [001]:<Enter>Keypair was created...
Page 80 - Port Mapping Commands
C H A P T E R 5 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 5-22 Port Mapping Commands These commands are used to execute the operations described in Chapter 3’s Mapping and Blocking sections. Command Definition create block Create a block to preclude access to specified IP addr...
Page 83 - Operational Commands
C H A P T E R 5 Command Reference 5-25 Operational Commands Command Description bypass WARNING: Do not issue the bypass command from a remote management session (Telnet or SSh). Doing so will result in an immediate disconnect from the 7110/7115. Enables bypass mode, in which traffic flows through 71...
Page 85 - Remote Management Commands
C H A P T E R 5 Command Reference 5-27 Remote Management Commands Command Description set ip Assign an IP address and netmask to the 7115’s network interface for Telnet and SSh sessions. CAUTION: The assignment of an IP address introduces security issues. Please refer to the “Access Control” section...
Page 92 - Alarms and Monitoring Commands
C H A P T E R 5 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 5-34 Alarms and Monitoring Commands Command Description set alarms Enable all or a selection of the 7115’s alarms. Syntax: Intel 7115> set alarms <all|esc|rsc|utl|ovl|nls> where <all> enables all five of ...
Page 96 - Configuration Commands
C H A P T E R 5 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 5-38 Configuration Commands Command Description show config Display current volatile configuration settings. Example: Intel 7115> show config# default config file created on Tues July 25 06:56:46 2000 (Configuraton p...
Page 102 - Administration Commands
C H A P T E R 5 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 5-44 Administration Commands Command Description password Set the password. Example: Intel 7115> password Old password:<xxxxx> Enter new admin password (5 chars min.):<yyyyy> Retype new password:<yyyyy...
Page 105 - Logging Commands
C H A P T E R 5 Command Reference 5-47 Logging Commands show serial Display console serial parameters. Example: Intel 7115> show serialSpeed: 9600Bits: 8Stop bits: 1Parity: nIntel 7115> exit Log the user out of the CLI. If the current configuration has changed, the user is allowed to save the ...
Page 107 - Remote Management
Remote Management Overview The current software release allows you to remotely manage the 7110/7115. Remote management is available via three protocols: • Telnet • Secure Shell (SSh) • SNMP NOTE: Remote management functions can be enabled and configured only through the local serial console. When en...
Page 108 - Limitations; Remote Management CLI Commands
C H A P T E R 6 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 6-2 Limitations Note that several CLI capabilities available at the local console are unavailable in remote sessions. These are: • Assignment of an IP address to the 7110/7115’s network interface • Enable/disable Telnet...
Page 110 - Remote Telnet Sessions; Local Serial Console
C H A P T E R 6 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 6-4 Remote Telnet Sessions This section contains procedures for accessing the 7110/7115’s CLI via remote Telnet session. Local Serial Console Assign an IP address to the 7110/7115’s network interface using the following...
Page 111 - Remote Console, Telnet
C H A P T E R 6 Remote Telnet Sessions 6-5 Remote Console, Telnet With remote Telnet enabled on the 7110/7115, use the following procedure to access it’s CLI: Unix-prompt> telnet 10.1.1.1 Trying 10.1.1.1... Connected to 10.1.1.1. Escape character is ’^]’. . . . Serial 0:a0:a5:11:4:2e password:<...
Page 112 - Disabling Telnet; Remote SSh Sessions
C H A P T E R 6 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 6-6 Disabling Telnet Telnet sessions are disabled at the 7110/7115’s local serial console. To disable, follow the steps below: Intel 7115> set telnet disable To verify Telnet disable: Intel 7115> show telnet Telne...
Page 113 - Changing the SSh Port
C H A P T E R 6 Remote SSh Sessions 6-7 Verify the route configuration (optional): Intel 7115> show route Default Route : 10.1.1.1 Delete a route configuration (optional): Intel 7115> set route none NOTE: To ensure that this remote management configuration persists across a device shutdown and...
Page 114 - Disabling SSh; SNMP
C H A P T E R 6 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 6-8 To display the SSh port: Intel 7115 > show ssh_port SSH Port Number: 22 0 Disabling SSh SSh sessions are disabled at the 7110/7115’s local serial console. To disable, follow the steps below: Intel 7115> set ss...
Page 115 - Standards Compliance
C H A P T E R 6 SNMP 6-9 Standards Compliance The 7110/7115 SNMP agent is bilingual and can support both SNMPv1 and SNMPv2c requests. Intel private enterprise MIB files are compliant with SMIv2 as specified in RFC 1902. SET operations are not allowed for any Intel private MIB objects for the 7110/71...
Page 117 - Enterprise Private MIB Summary
C H A P T E R 6 SNMP 6-11 Enterprise Private MIB Summary Following is a summary of the 7110/7115 private MIB: mode inline(1): Device is configured to accelerate SSL traffic bypass(2): Device is configured to pass through all SSL traffic failMode safe(1): Two ethernet segments fail open, stopping tra...
Page 122 - Trap Summary; Standard SNMP Traps
C H A P T E R 6 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 6-16 Trap Summary The following list summarizes the traps generated by the 7110/7115. For details about a particular trap, please read the description of each MIB above, or read the documentation within the MIB file. Tr...
Page 124 - Specifying SNMP Information
C H A P T E R 6 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 6-18 Specifying SNMP Information Configurable SNMP parameters can be set collectively using the setsnmp snmp_info command as illustrated below: Intel 7115> setsnmp snmp_info SNMP port [161]: 161 SNMP trap port [162]:...
Page 125 - Community String
C H A P T E R 6 SNMP 6-19 Community String Use CLI commands setsnmp snmp_community, list snmp_community and delete snmp_community to set, list, and delete SNMP community strings. Intel 7115> setsnmp snmp_community IP []: Community String []: Intel 7115> list snmp_community SNMP Community List ...
Page 126 - Trap Community String
C H A P T E R 6 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 6-20 Trap Community String Use CLI commands, setsnmp trap_community, list trap_community and delete trap_community to set, display, and delete trap community strings. Intel 7115> setsnmp trap_community SNMP Trap Comm...
Page 127 - Access Control
C H A P T E R 6 Access Control 6-21 Access Control The 7110/7115 provides block and permit commands which allow you to deny or allow clients to access servers based on IP, IP mask, port and port mask. To block a client, specified by IP and IP mask, from accessing a specified server, use the create b...
Page 131 - Alarm Types; Alarm Modifiers and Messages:
C H A P T E R 7 Alarm Types 7-3 For example: Intel 7115> set alarms Select monitoring fields (all, esc, rsc, utl, ovl, nls) [all]: all Intel 7115> show alarms All alarms are enabled. Intel 7115> set alarms none Intel 7115> show alarms All alarms are disabled. Alarm Types The configurable...
Page 132 - RSC: Refused SSL Connections; Alarm Modifiers and Messages
C H A P T E R 7 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 7-4 FNTB: indicates front panel-controlled bypass FNTI: indicates front panel-controlled inline APPR: indicates application restart RSC: Refused SSL Connections When enabled, an alarm is generated whenever SSL connectio...
Page 133 - UTL: Utilization Threshold Alarm
C H A P T E R 7 Alarm Types 7-5 To display Overload Alarm time window show rsc_window Examples: Intel 7115> set rsc_window 10 Intel 7115> show rsc_window Check refused SSL connections [secs]: 10 UTL: Utilization Threshold Alarm This alarm monitors three utilization threshold values: • CPU • Co...
Page 134 - Extended Data; UTL Alarm CLI commands
C H A P T E R 7 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 7-6 NMRL: Message: [CPU|Open connections|CPS] drop below low water mark Extended Data CPU: Indicates that CPU Utilization triggered the alarm. CON: Indicates that Total Active Connections triggered the alarm. CPS: Indic...
Page 136 - NLS: Network Link Status Alarm; Alarm modifiers and messages:; Alarm Logging
C H A P T E R 7 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 7-8 NLS: Network Link Status Alarm An alarm is issued whenever the Network or Server link status is changed. Format: A:yyyymmddhhmmss:NLS:NETL|SVRL:LNKD|10HDX|10 FDX|100HDX|100FDX:/*message*/ Where: A: identifies the me...
Page 141 - Monitoring; Monitoring Reports
C H A P T E R 7 Monitoring 7-13 Monitoring Monitoring Reports A monitoring report is one line of user-configurable text displayed at the console at a user-configurable interval of between five and 65000 seconds. The interval default is 15 seconds.Console Configuration Monitoring reports are disabled...
Page 142 - Monitoring Reports CLI Commands
C H A P T E R 7 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide 7-14 (t)otal NetIF;s Net interface; (s)tatus [NC|10HDX|10FDX|100HDX|100FDX] SvrIF;s Svr interface; (s)tatus [NC|10HDX|10FDX|100HDX|100FDX] BES;c,m,t Bytes Encrypted per Second; (c)urrent, (m)ax, (t)otal BDS;c,m,t Bytes ...
Page 145 - Software Updates
s Software Updates Use the import upgrade command to update/upgrade your Intel® NetStructure™ 7110/7115 e-Commerce Accelerator software. When you upgrade your 7110/7115 software, the configuration (including all keys, certificates, and mapping) is saved. However, all log files are cleared. The softw...
Page 155 - Front Panel
Front Panel The following diagram shows the LEDs, buttons, switches and con-nections for the Intel® NetStructure™ 7110/7115 e-Commerce Ac-celerator. Note that there is no power switch or button. Power is applied to the device by connecting the power cable. Figure A-1: Front Panel Connectors, Control...
Page 158 - Connectors
A P P E N D I X A Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide A-4 Connectors The following table describes the 7110/7115’s connectors. Designator Type Purpose Network RJ45 100baseTX/10baseT connection to network (clients), wired as a host port. Server RJ45 100baseTX/10baseT conn...
Page 160 - Bypass Button
A P P E N D I X B Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide B-2 Figure B-1: Front Panel Detail: Failure/Bypass Mode Controls and Indicators Bypass Button Forcing a bypass of the 7110/7115 may be necessary when certain actions must be performed offline (e.g., configuration chan...
Page 163 - Supported Ciphers; Cipher Strength
Supported Ciphers The Intel® NetStructure™ 7110/7115 e-Commerce Accelerator supports only RSA key exchange and authentication. Diffie-Hellman (including Anonymous and Ephemeral) key exchange/authentication and DSS authentication are not supported. Use the set cipher command to specify the cipher. Th...
Page 164 - SSL Version Level
A P P E N D I X C Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide C-2 SSL Version Level • SSLv2 - all SSL version 2.0 ciphers • SSLv3 - all SSL version 3.0 ciphers • SSLv2 and SSLv3 - all SSL version 2.0 and 3.0 ciphers The default cipher value is all supported ciphers (both SSLv2 a...
Page 167 - Taiwan Class A EMI Statement
Regulatory Information Taiwan Class A EMI Statement
Page 168 - VCCI Statement
A P P E N D I X D Intel ® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide D-2 VCCI Statement Class A ITE This is a Class A product based on the standard of the Voluntary Control Council for Interference by Information Technology Equipment (VCCI). If this equipment is used in a domestic env...
Page 169 - CE Compliance Statement
A P P E N D I X D Canada Compliance Statement (Industry Canada) D-3 If these suggestions don’t help, consult your dealer or an experienced radio/TV repair technician for more suggestions. NOTE: This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: ...
Page 170 - CISPR 22 Statement; Australia
A P P E N D I X D Intel ® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide D-4 CISPR 22 Statement WARNING: This is a Class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures. VCCI Class A (Japan) Au...
Page 171 - AVERTISSEMENT
A P P E N D I X D CISPR 22 Statement D-5 • Isolated from strong electromagnetic fields produced by electrical devices. • In regions that are susceptible to electrical storms, we recommend you plug your system into a surge suppressor and disconnect telecommunication lines to your modem during an elec...
Page 172 - WARNUNG; AVVERTENZA
A P P E N D I X D Intel ® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide D-6 WARNUNG Das System wurde für den Betrieb in einer normalen Büroumgebung entwickelt. Der entwickelt. Der Standort sollte: • sauber und staubfrei sein (Hausstaub ausgenommen); • gut gelüftet und keinen Heizquellen ...
Page 173 - ADVERTENCIAS
A P P E N D I X D CISPR 22 Statement D-7 • In aree soggette a temporali, è consigliabile collegare il sistema ad un limitatore di corrente. In caso di temporali, scollegare le linee di comunicazione dal modem. • Dotata di una presa a muro correttamente installata. Non modificare o utilizzare il cavo...
Page 174 - Wichtige Sicherheitshinweise
A P P E N D I X D Intel ® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide D-8 Wichtige Sicherheitshinweise 1. Bitte lesen Sie sich diese Hinweise sorgfältig durch. 2. Heben Sie diese Anleitung für den spätern Gebrauch auf. 3. Vor jedem Reinigen ist das Gerät vom Stromnetz zu trennen. Verve...
Page 185 - Glossary
Glossary This section defines terms and acronyms used throughout the Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide. Bypass User action causing traffic to bypass 7110/7115 processing, done either through the CLI bypass command or Bypass button on the front panel of the 7110/7115. C...
Page 189 - Support Services; Worldwide Access to Technical Support
Support Services Intel offers a range of support services for your new product. You can learn about the options available for your area by visiting the Intel® support Web site at http://www.intel.com/network/service and choosing your geography. Worldwide Access to Technical Support Intel has technic...
Page 193 - Index
Index A Access Control 6-21Administration Commands 5-44Alarms Encryption status change 7-3Logging 7-8Network link status 7-8Overload 7-7Refused SSL connections 7-4Utilization threshold 7-5 Automapping 3-21Automapping with multiple port combi-nations 3-22Automapping with user-specified keyand certifi...
Page 194 - Deleting a block 3-25
I N D E X Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide Index-2 Deleting a block 3-25 E Egress routers 4-10Encryption status change alarm 7-3 F Failure/Bypass modes B-1Front panel LEDs A-2 G Getting Help 5-1Global site certificates 3-15 H Help 5-1 I Import certificate 3-9, 3-13 im...
Page 195 - Remote SSh sessions 6-6
I N D E X Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide Index-3 Telnet, local console 6-4Telnet, remote console 6-5 Remote SSh sessions 6-6 S Scenarios Cascading Multiple 7110/7115s 4-7Using the 7110/7115 with Ingress and Egress Routers 4-10 Using the 7110/7115 with Multiple Serve...
