background image

Blue Coat

®

 Systems

SG510 Series

Installation Guide

Version: SGOS 4.2.x and 5.1.x

Содержание SG510 Series

Страница 1: ...Blue Coat Systems SG510 Series Installation Guide Version SGOS 4 2 x and 5 1 x...

Страница 2: ...erceptor Scope RA Connector RA Manager Remote Access are trademarks of Blue Coat Systems Inc and CacheFlow Blue Coat Accelerating The Internet WinProxy AccessNow Ositis Powering Internet Management Th...

Страница 3: ...Powering On the SG510 16 Power LED 16 Chapter 2 Configure a SG510 Overview of First Time Configuration 19 Section A Configuring the SG510 with the Front Panel Features LCD Behavior 21 System LCD and M...

Страница 4: ...New Disk Drive 73 Chapter 4 Option Cards Dual Gigabit Ethernet 1000B SX optical Card 75 Dual Gigabit Ethernet copper Pass Through Card 75 SSL Accelerator Card 75 Chapter 5 Troubleshooting The SG510 d...

Страница 5: ...Zealand EC EMC Warning 89 Taiwan BSMI Notification 89 Japan VCCI EMC Notification 89 Battery Warning Notification 89 Chinese Battery Warning Notification 90 China CCC Notification 90 Lasers 90 Declara...

Страница 6: ...P N 231 02833 Blue Coat SG510 Installation Guide page vi Appendix F Traditional Chinese Regulatory Statements Index...

Страница 7: ...se available at http download bluecoat com Fully configure the appliance To configure the SG510 you will need to download the Blue Coat ProxySG Configuration and Management Guide Suite the CMG availab...

Страница 8: ...ivity and configure basic networking settings Power Disk Drive and LAN LEDs A front panel that pivots downward and pulls outward giving you access to up to two disk drives Mounting brackets that exten...

Страница 9: ...ated on the back of the SG510 An AC power connector Two USB Universal Serial Bus ports A serial port to connect to a PC to a serial terminal or to a stand alone serial console terminal Two full duplex...

Страница 10: ...quipment is not compromised Mechanical Loading Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading Circuit Overloading Cons...

Страница 11: ...agement support to the back of the system as follows 1 Position the cable management support at the back of the system on the right secure it with a 6 32 x 1 4 flathead screw at the side Figure 1 4 At...

Страница 12: ...on of the disk drives that are shipped with the SG510 The drive slots on each end of the appliance contain non removable blank disk drive spacers Figure 1 5 Disk Drive Slot Arrangement Important You c...

Страница 13: ...nk drive spacers If you ordered only a single disk drive the unit ships with a third disk drive spacer installed in Slot 2 1 Press the push tabs on each side of the front panel bezel to release the lo...

Страница 14: ...rrier upright so that the disk drive button appears on the right press this button to release the disk drive lever Figure 1 8 Release the Disk Drive Lever 3 Use the lever to slide the disk drive carri...

Страница 15: ...gently push the lever in towards the button until the handle latches on the button 5 Repeat steps 2 to 4 to install the optional disk drive in drive slot 2 Note If you need to remove a drive press the...

Страница 16: ...e into the serial connector if necessary If you attach the serial cable you can connect the system to a PC serial terminal or stand alone Serial Console box 3 Plug the enclosed power cord into the pow...

Страница 17: ...plays the name Blue Coat The Power LED starts of solid amber and then begins flashing green and amber After a moment the disk drive LEDs corresponding to the disk drives that are installed light up If...

Страница 18: ...P N 231 02833 Blue Coat SG510 Installation Guide page 18...

Страница 19: ...s is the quickest and easiest way to do a first time configuration To use the front panel method go to Configuring the SG510 with the Front Panel Features on page 21 Serial Console Use a direct connec...

Страница 20: ...nfigure the software Download the Blue Coat ProxySG Configuration and Management Guide Suite available on the Blue Coat Web site at www bluecoat com Look for WebPower Login under Support Remote Config...

Страница 21: ...asic networking parameters LCD Behavior The default behavior of the front panel LCD is to turn off after 30 seconds The front panel LCD behavior is configurable see Configuring the Front Panel LCD Beh...

Страница 22: ...Status mode displays CPU utilization and freshness statistics In Status mode there is no cursor in the LCD Configuration Mode From Status mode push the Enter button to go to Configuration mode In Con...

Страница 23: ...ter IP address To configure the parameter use the Left and Right arrow buttons to position the cursor over a character you want to change then use the Up and Down arrow buttons to cycle through the ch...

Страница 24: ...you push the Enter button in Edit mode the system saves any changes you made to the parameter displayed and returns to Configuration mode Menu Button The Menu button functions like an Escape key When...

Страница 25: ...When the LCD displays IP address not configured press the Enter button to enter Configure mode The IP address parameter appears in the LCD and the cursor appears as an underscore 2 Press the Enter but...

Страница 26: ...utton to return to Configure mode To configure the password now follow Steps 3 and 4 8 Push the Down arrow button to move to the enable password parameter repeat Step 7 for the enable password The LCD...

Страница 27: ...P N 231 02833 Blue Coat SG510 Installation Guide page 27 Initial network configuration is now complete The LCD cycles between CPU Utilization and Freshness statistics...

Страница 28: ...IT administrator For less common network configurations such as using WCCP or a Layer 4 switch refer to the Blue Coat ProxySG Configuration and Management Guide Suite To Place the SG510 into the Netw...

Страница 29: ...described in Resetting the SG510 to Factory Defaults on page 81 4 2 2 x Requirements If the SG510 is running 4 2 2 x or later you can access the 4 2 2 x initial configuration Web page using one of the...

Страница 30: ...age 29 1 Place the SG510 into the network For information on placing the SG510 into the network see Placing the SG510 into the Network on page 28 2 Power on the SG510 3 Plug one end of the Ethernet ca...

Страница 31: ...nfiguration page see The Initial Configuration Page is Not Accessible on page 78 7 Enter the network parameters for your appliance Figure 2 2 Initial Configuration Page Network Parameters 8 Enter the...

Страница 32: ...for proxied services Selecting Allow permits all proxied transactions to pass through the SG510 you must then create policies to explicitly deny proxied transactions on a case by case basis Selecting...

Страница 33: ...y in a valid hashed format The serial port allows you to configure and access the SG510 using a serial cable This can pose a security risk because anyone with access to the appliance can reconfigure t...

Страница 34: ...ration was successful you have successfully completed initial configuration This window provides details about accessing the SG510 Management Console such as the Management Console SHA1 fingerprint Sa...

Страница 35: ...G510 3 Use the front panel or serial console to configure the SG510 IP address netmask gateway address and DNS address 4 Enter the following URL into your browser https IP_Address 8083 In the precedin...

Страница 36: ...lete the Setup Wizard you must a Enter the console access information b Enter the CLI Enable password c Optional but highly recommended Secure the serial port d Enter the network settings IP Address S...

Страница 37: ...ge 37 h Confirm the settings and click Configure Note The Web based wizard is available only for initial appliance configuration or following a reset to factory defaults After you click Configure duri...

Страница 38: ...k information You can also configure a bridge or a forwarding host or you can restrict access to the SG510 to a particular IP address or set of IP addresses PC Note If the PC is using standard serial...

Страница 39: ...sole port start the terminal and verify that it is set using the RS 232C parameters defined in the following table RS 232C Parameters PC Connect the serial cable that came with the SG510 to a serial p...

Страница 40: ...ng steps 4 On page 1 indicate whether you want to configure a bridge enter an interface number and enter the values as indicated for the four network settings Note If you enter YES to configure a brid...

Страница 41: ...additional management tasks If you have a pass through card you can configure it by using the bridge name passthru slot number For example if the pass through card is at slot 2 the bridge name would...

Страница 42: ...emove IP addresses or you can enable or disable workstation restrictions For details refer to Volume 5 Securing the ProxySG in the Blue Coat ProxySG Configuration and Management Guide Suite page 2 of...

Страница 43: ...he serial port password for a SG510 you cannot get access to the SG510 Figure 2 10 Initial Setup Secure the Serial Port not recommended Do you want to secure the serial port Y N Yes Yes Enter setup pa...

Страница 44: ...ut it may also create a security hole To close the security hole we recommend that you restrict the use of the console account to specific workstations identified by their IP address This dialog allow...

Страница 45: ...do not need to configure a forwarding host now unless you are configuring multiple systems to point to the same forwarding host page 4 of 5 Press ESC at any time to return to the main menu DIRECTIONS...

Страница 46: ...he following address into your Web browser https IP Address 8082 where IP Address is the IP address that you configured for this SG510 in Step 4 See Logging on to the SG510 Management Console on page...

Страница 47: ...cribed below RS 232C Parameters PC Connect a serial cable to a serial port on the PC and to the SG510 s serial console port start the PC open a terminal emulator such as HyperTerminal and connect to t...

Страница 48: ...tem is ready for the first time network configuration 4 On page 1 enter the interface number IP address IP subnet mask IP gateway and DNS server parameters CONFIGURATION ALERT System startup cannot co...

Страница 49: ...management tasks Enter interface number to configure 0 0 IP address 0 0 0 0 10 25 36 47 IP subnet mask 255 255 255 0 255 255 255 0 IP gateway 0 0 0 0 10 25 36 1 DNS server 0 0 0 0 101 52 23 100 You h...

Страница 50: ...e SG510 using a serial cable This can pose a security risk because anyone with access to the appliance can reconfigure the SG510 settings This optional step sets a password for the serial console setu...

Страница 51: ...mum security you should restrict physical access to the SG510 Do you want to secure the serial port Y N Yes Y Enter setup password Verify setup password WARNING If you continue and enable the secure s...

Страница 52: ...n emergencies as a way to log in when policy is broken but it may also create a security hole To close the security hole we recommend that you restrict the use the console account to specific workstat...

Страница 53: ...0 Management Console on page 62 for more information about accessing the SG510 When you have set the basic networking parameters and connected the SG510 to the network you are ready to fully configure...

Страница 54: ...uide page 54 information about configuring and administering the SG510 including information about setting policies that will explicitly grant or deny proxied transactions refer to the Blue Coat Proxy...

Страница 55: ...ace the appliance into the network and click the generated URL After the appliance has its initial configuration the administrator can finish configuring the appliance either remotely or locally The r...

Страница 56: ...ation 1 Enter the following URL into your browser http download bluecoat com initial remote initial remote html 2 The SG510 Initial Configuration Setup for Remote Appliances window opens 3 Enter the n...

Страница 57: ...mode password If you enter the passwords in plain text click hash the password for each password If you enter the passwords in hashed format select password is in hashed format for each password A has...

Страница 58: ...nal Secure the serial port select Secure the Serial Port and enter the password If you enter the password in plain text click hash the password If you enter the password in hashed format select passwo...

Страница 59: ...network environment 8 Copy and send one or more of the URLs to the local administrator who will complete the configuration Verify that the local administrator has all required information such as how...

Страница 60: ...k the link If a new browser window appears with the message ProxySG Initial Configuration was successful you have successfully completed initial configuration This window provides details about access...

Страница 61: ...e administrator if you suspect that this is required When you have set the basic networking parameters and connected the SG510 to the network you are ready to fully configure the appliance For a list...

Страница 62: ...r to Volume 5 Securing the ProxySG in the Blue Coat ProxySG Configuration and Management Guide Suite Logging on to the SG510 Management Console The Management Console is a graphical interface for conf...

Страница 63: ...ntains the complete text of the Blue Coat ProxySG Configuration and Management Guide Suite Use the Contents and Index links to navigate through the manual When you have set the basic networking parame...

Страница 64: ...t the username or password you can reset them using either the front panel control buttons and LCD or a serial terminal or PC Using a Direct Serial Connection to Connect to the SG510 CLI 1 To set up t...

Страница 65: ...guring and administering the ProxySG Using an SSH Client to Connect to the SG510 CLI 1 Start the ProxySG Note You must already have an SSH Client installed before you proceed with the steps below 2 La...

Страница 66: ...rompt enter configure terminal to configure ProxySG settings SGOS configure terminal Enter configuration commands one per line End with CTRL Z SGOS config Refer to the Blue Coat ProxySG Configuration...

Страница 67: ...igure commands see Logging on to the SG510 on page 62 2 From the privileged mode command prompt change the SG510 front panel PIN by entering one of the following commands SGOS config security front pa...

Страница 68: ...e the Front Panel LCD through the CLI 1 Open a terminal session with the SG510 at the standard mode command prompt enter enable and your privileged mode password SGOS enable Enable Password SGOS 2 At...

Страница 69: ...to always remain off when the ProxySG is powered on This is the default behavior on Configures the LCD to always remain on when the SG510 is powered on timeout Configures the LCD to turn off after a s...

Страница 70: ...P N 231 02833 Blue Coat SG510 Installation Guide page 70...

Страница 71: ...lose all configuration settings A SG510 Appliance has open slots for two disk drives The unit ships with two blank disk drive spacers already installed Do not attempt to remove these blank drives If y...

Страница 72: ...Slots 3 If other equipment blocks the front panel from opening all the way you can pull the front panel forward sliding out the front panel tray until you can access the disk drives Figure 3 27 Access...

Страница 73: ...fore installing a new disk drive 1 Take the new disk drive and press the button to release the lever 2 Align the drive carrier with the guide rails of the drive slot Using the lever carefully insert t...

Страница 74: ...n the front panel tray if necessary and close the front panel 5 Power up the SG510 The SG510 recognizes and initializes the disk no configuration is necessary When the new disk is plugged in the corre...

Страница 75: ...e in the SG510 In the event of any of the above the Pass Through card will physically bypass Ethernet traffic around the SG510 It does away with the need for a router or Layer 4 switch when the SG510...

Страница 76: ...P N 231 02833 Blue Coat SG510 Installation Guide page 76...

Страница 77: ...wer cord is fully inserted into the back of the SG510 The power cord is plugged into a working outlet or power supply When the SG510 is powered up and running the Power LED on the front panel of the S...

Страница 78: ...Or you can add a static route on the host client Verify that the browser is not proxied To change or check the browser settings complete one of the following steps In a Windows browser select Tools In...

Страница 79: ...55 255 10 2 11 155 3 Verify the static route by entering the following command C route print You cannot access the serial console If you have connected a serial cable to the SG510 but you cannot open...

Страница 80: ...rity warning dialog appears This warning indicates that the SG510 credentials could not be verified by a known certificate authority such as VeriSign This is because the SG510 dynamically generated th...

Страница 81: ...tial configuration has not yet been performed the Power LED flashes green and amber If the Power LED is solid green the initial configuration has already been performed If you did not perform an initi...

Страница 82: ...the configuration to defaults 4 Click Apply The appliance performs a soft restart The power LED turns amber during the restart Wait until the reset is complete about one minute before trying to compl...

Страница 83: ...ter Rebooting If the appliance is not coming back up after rebooting and the serial port is connected to terminal server terminal concentrator try the following 1 Open an active session on the termina...

Страница 84: ...P N 231 02833 Blue Coat SG510 Installation Guide page 84...

Страница 85: ...essungen L x W x H 58 cm x 44 cm x 4 4 cm 22 8 in x 17 4 in x 2 7 in Weight Gewicht 15 kilograms maximum 33 pounds maximum Power Input AC Stromversorgung 100 240 VAC 50 60 Hz 6 3 3 0A Processor Prozes...

Страница 86: ...Operating Betrieb Non Operating Lagerung Temperature Betriebstemeperatur 5 C to 35 C 41 F to 95 F 40 C to 70 C 40 F to 158 F Relative Humidity non condensing Relative Luftfeuchte 15 to 95 at 35 C 95...

Страница 87: ...reful Do not get any water on the system System use and installation The system is intended for use in a server room only It is not intended be installed in individual employee work areas Power Cord C...

Страница 88: ...vo digital Clase A seg n la parte 15 de las normas de la FCC Estos l mites est n designados para proveer una protecci n razonable contra interferencias da inas cuando el equipo es usado en un ambiente...

Страница 89: ...ports not defined for normal operation according to this manual might result in excessive radiated emissions The user is then responsible for all corrective action in the event of any problem PRECAUCI...

Страница 90: ...ant VORSICHT Explosionsgefahr bei unsachgem em Austausch der Batterie Ersatz nur durch denselben oder einen vom Hersteller empfohlenen glelchwertigen Typ Entsorgung gebrauchter Batterien nach Angaben...

Страница 91: ...P N 231 02833 Blue Coat SG510 Installation Guide page 91 Blue Coat Systems A A FCC 15 EMC A EMC A ICES 003 Cet appareil numerique de la class A est conforme a la norme NMB 003 du Canada EMC A...

Страница 92: ...P N 231 02833 Blue Coat SG510 Installation Guide page 92...

Страница 93: ...P N 231 02833 Blue Coat SG510 Installation Guide page 93...

Страница 94: ...ollowing standards EN 60950 1999 2004 EN 55022 1994 EN 50024 1998 Following the provisions of the 73 23 EEC and 89 336 EEC Directives including the Amending Directive 93 68 EEC Blue Coat Systems Model...

Страница 95: ...rior Antes de remover la cubierta superior apague el equipo L neas directivas sobre la ventilaci n Tenga cuidado Para evitar el sobrecalentamiento del sistema no bloquee las aberturas del sistema Teng...

Страница 96: ...misma categorizaci n de corriente No use el cable de alimentaci n provisto con su equipo para otros productos u otro uso Precauci n este dispositivo no est equipado con una perilla de encendido El ca...

Страница 97: ...le Funktionsweise zu garantieren befolgen Sie bitte folgende Richtlinien Entfernen der oberen Abdeckung Bevor Sie die obere Abdeckung entfernen schalten Sie den Strom ab Bel ftungsrichtlinie Seien Sie...

Страница 98: ...rbindung Vorsicht Nicht alle Stromkabel haben die gleiche Stromst rkeleistung Verwenden Sie das mitgelieferte Stromkabel nicht mit anderen Ger ten Vorsicht das Ger t hat keinen Stromschalter Das Strom...

Страница 99: ...P N 231 02833 Blue Coat SG510 Installation Guide page 99 Appendix E Simplified Chinese Regulatory Statements...

Страница 100: ...P N 231 02833 Blue Coat SG510 Installation Guide page 100...

Страница 101: ...P N 231 02833 Blue Coat SG510 Installation Guide page 101...

Страница 102: ...P N 231 02833 Blue Coat SG510 Installation Guide page 102...

Страница 103: ...P N 231 02833 Blue Coat SG510 Installation Guide page 103 Appendix F Traditional Chinese Regulatory Statements...

Страница 104: ...P N 231 02833 Blue Coat SG510 Installation Guide page 104...

Страница 105: ...P N 231 02833 Blue Coat SG510 Installation Guide page 105...

Страница 106: ...P N 231 02833 Blue Coat SG510 Installation Guide page 106...

Страница 107: ...ontrol buttons 21 D default proxy policy configuring 32 58 disk drives inserting into the SG510 13 lever on 14 72 release button for lever 14 72 removing 14 disk drive LEDs 17 74 DNS server setting an...

Страница 108: ...figuring using the front panel 26 PC using with the SG510 38 46 PC connection problems 38 power cord power LED description of 16 power switch 16 R rack mounting the SG510 10 S security configuring a f...

Страница 109: ...ode 22 T terminal emulator 39 direct serial connection parameters 47 troubleshooting 77 U username CLI 64 configuring remotely 57 configuring using a serial terminal or PC 42 50 configuring using a We...

Страница 110: ...Index Blue Coat SG510 Installation Guide 110...

Отзывы: