Chapter 3: ProtectServer External 2 Plus Installation and Configuration
By default, the ProtectServer Network HSM allows access to all networks and hosts. The default policy for
the INPUT and OUTPUT chain is set to ACCEPT. The default policy for the FORWARD chain is set to
DROP, since the ProtectServer Network HSM is not used to forward packets, as in a router or proxy.
CAUTION!
If you are configuring iptables via SSH, a malformed rule can cause a lockout.
a.
To add an ACCEPT rule, specify a host or network:
psesh:>
network iptables addrule accept host -ip
<IP_address>
psesh:>
network iptables addrule accept network -net
<IP_address>
-mask
<netmask>
b.
To add a DROP rule, specify a host or network:
psesh:>
network iptables addrule drop host -ip
<IP_address>
psesh:>
network iptables addrule drop network -net
<IP_address>
-mask
<netmask>
c.
To see the current list of rules:
psesh:>
network iptables show
d.
To delete a rule, specify the rule's position on the list:
psesh:>
network iptables delrule -rulenum
<number>
A rule's number is based on its current list position, so executing
network iptables delrule -rulenum 1
multiple times will eventually delete the entire list.
e.
Save your iptables changes:
psesh:>
network iptables save
You must execute this command, or any changes will be lost on the next appliance reboot.
8.
After making any change to the network configuration, reboot the appliance:
psesh:>
sysconf appliance reboot
9.
View the new network settings:
psesh:>
network show
SSH Network Access
After you have completed the network configuration, you can access the ProtectServer External 2 Plus over the
network using the SSH protocol. You need an SSH client such as puTTY (available for free from
).
Powering off the ProtectServer External 2 Plus
Use PSESH to power off the appliance.
To power off the ProtectServer External 2 Plus
While logged in to PSESH as
admin
or
pseoperator
, issue the command:
psesh:>
sysconf appliance poweroff
Thales ProtectServer HSM 5.9.1 ProtectServer HSM and ProtectToolkit Installation and Configuration Guide
2021-11-02 08:51:40-04:00 Copyright 2009-2021 Thales Group
57
