Blue Coat SG210 series, Руководство по установке

Страница: 13 / 54

Chapter 2: First-Time Configuration 13
Chapter 2: First-Time Configuration
First-time configuration involves setting the basic network parameters and ensuring that the SG210 and
software are working properly.
The initial configuration might be done either using a standalone PC, a serial terminal, or after placing the
SG210 into your network. The placement of the SG210 depends on the flow of traffic within your
organization. The SG210 must be able to intercept initial packets on each client or application connection
to be optimized. Typical deployments include:
❐
Explicit proxy configuration— where the client browser is explicitly configured to use a proxy
server. The browser is given the IP address and port number of the SG210.
It is also possible to configure the browser to download the proxy settings from a Web server. This
is called a Proxy Auto-Configuration (PAC) file.
❐
Transparent proxy — where the client browser does not know that the traffic is being processed by
a machine other than the Origin Content Server. To enable the SG210 to intercept traffic sent to it,
you must create a service and define it as transparent. The service is configured to intercept traffic
for a specified port, or for all IP addresses on that port. Traffic redirection is managed through
policies you create on the redirection device.
A transparent HTTP proxy, for example, typically intercepts all traffic on port 80 (all IP addresses).
To make sure that the appropriate traffic is directed to the ProxySG, deploy hardware such as a
Layer-4 switch or a WCCP router, or the ProxySG appliance’s software bridge that can redirect
selected traffic to the appliance.
Note: The cabling and connections specific to the deployment of the SG210 are not within the
scope of this book. Check with your network administrator for guidance on deploying the
SG210 within your organization.
You must use the serial console to assign the IP address and the IP subnet mask for the SG210 appliance.
Choose one of the following methods to configure the SG210:
• Serial Setup Console
Use this method if you want to configure basic settings only and do not immediately require traffic
interception of specific services. If you want to configure traffic interception or ADN settings, choose
the Web Setup Wizard option. See
Section A: “Using the Serial Console to Configure Initial Settings on
page 15 to configure initial settings. To continue with the configuration using the serial console setup
see
Section B: “Configuring the SG210 Using the Serial Setup Console on page 18.
• Web Setup Wizard
Use the Web Setup Wizard if you need to immediately configure traffic interception or ADN settings.
To use the Web Setup Wizard, you must first configure an IP address for the appliance using the serial
console. See
Section A: “Using the Serial Console to Configure Initial Settings on page 15 to configure
initial settings. To continue with the configuration using the Web setup wizard see Section C:
“Configuring the SG210 Using the Web Setup Wizard on page 23.