Page 226 / 249 Scroll up to view Page 221 - 225
System
221
The majority of Linux users will already have a TFTP server installed as part of
their distribution, which must be configured and running.
3. In the
Web Management Console
web administration pages, click
Advanced
then
Flash Upgrade
.
Enter the server
IP Address
(i.e. PC with the TFTP server and
binary image) and the binary image’s filename.
4. Click
Upgrade
to commence the upgrade.
During the upgrade, the front panel LEDs on the CyberGuard SG appliance will flash in
an in-and-out pattern.
The CyberGuard SG appliance retains its configuration
information with the new firmware.
Warning
If the flash upgrade is interrupted (e.g.
power down), the CyberGuard SG appliance will
stop functioning and will be unusable until its flash is reprogrammed at the factory or a
recovery boot is performed.
User care is advised.
For instructions on performing a recovery boot, refer to Appendix E,
Recovering From a
Failed Upgrade
.
Reboot
Clicking this link will cause the CyberGuard SG appliance to perform a soft reboot.
It will
usually take around 10 seconds before it is up and running again.
Note that if you have
enabled bridging, the CyberGuard SG appliance may take up to 30 seconds to reboot.
Page 227 / 249
System
222
Reset button
The simplest method to clear the CyberGuard SG appliance’s stored configuration
information is by pushing the reset button on the back panel of the CyberGuard SG
appliance
twice
.
A bent paper clip is a suitable tool for performing this procedure.
Pushing the reset button
twice
clears all stored configuration information, reverts all
settings to the factory defaults, and reboots the CyberGuard SG appliance.
Note
When the CyberGuard SG appliance reboots, it will be configured with the IP address of
192.168.0.1, netmask 255.255.255.0.10.
Page 228 / 249
System
223
Technical Support
The
System
menu contains an option detailing support information for your CyberGuard
SG appliance.
This page provides basic troubleshooting tips, contact details for CyberGuard SG
technical support, and links to the CyberGuard SG Knowledge Base
(
) as shown in the following
figure:
Figure 11-4
The
Technical Support Report
page is an invaluable resource for the CyberGuard SG
technical support team to analyze problems with your CyberGuard SG appliance.
The
information on this page gives the support team important information about any
problems you may be experiencing.
Note
If you experience a fault with your CyberGuard SG appliance and have to contact the
CyberGuard SG technical support team, ensure you include the Technical Support
Report
with your support request.
The Technical Support Report should be generated when the issue is occurring on each
of the appliances involved, and attached in plain text format.
Page 229 / 249
Appendix A – IP Address Ranges
224
Appendix A – IP Address Ranges
IP ranges are fields that allow multiple IP addresses to be specified using a shorthand
notation.
Four distinct forms of range are acceptable:
1.
a.b.c.d
2.
a.b.c.d-e
3.
a.b.c.d-e.f.g.h
4.
a.b.c.d/e
The first is simply a single IP address.
Thus where ever a range is permitted, a single IP
address is too.
The second specifies range of IP address from
a.b.c.d
to
a.b.c.e
inclusive, i.e.
you are
specifying a range within a C class network or subnet.
For example,
192.168.5.15-30
includes 16 IP addresses.
The third form allows the address range to span network and subnet boundaries.
All
addresses including and between the two specified IP addresses are included in the
range.
For example,
192.168.5.190-192.168.6.56
includes 123 IP addresses.
The final form allows the range to be specified to cover an entire subnet.
The value of
e
specified the number of fix bits in the IP address range.
Thus,
a.b.c.d/24
covers the
entire C class network/subnet
a.b.c.0
and is equivalent to specifying the range as
a.b.c.0-255
(the value for
d
here can be anything as it is ignored).
A range of
a.b.c.d/32
is equivalent to the single IP address
a.b.c.d
.
For example,
192.168.12.150/26
is
equivalent to the range
192.168.12.128-191
and it includes 64 IP addresses.
Page 230 / 249
Appendix B – Terminology
225
Appendix B – Terminology
This section explains terms that are commonly used in this document.
Term
Meaning
ADSL
Asymmetric Digital Subscriber Line.
A technology allowing high-speed
data transfer over existing telephone lines.
ADSL supports data rates
between 1.5 and 9 Mb/s when receiving data and between 16 and 640
Kb/s when sending data.
Advanced
Encryption
Standard (AES)
The Advanced Encryption Standard is a new
block cipher standard to
replace DES, developed by NIST, the US National Institute of
Standards and Technology.
AES ciphers use a 128-bit block and 128,
192 or 256-bit keys.
The larger block size helps resist birthday attacks
while the large key size prevents brute force attacks.
Aggressive Mode
This Phase 1 keying mode automatically exchanges encryption and
authentication keys and uses less messages in the exchange when
compared to Main mode.
Aggressive mode is typically used to allow
parties that are configured with a dynamic IP address and a preshared
secret to connect or if the CyberGuard SG appliance or the remote
party is behind a NAT device.
Authentication
Authentication is the technique by which a process verifies that its
communication partner is who it is supposed to be and not an imposter.
Authentication confirms that data is sent to the intended recipient and
assures the recipient that the data originated from the expected sender
and has not been altered on route.
Automatic
Keying, Internet
Key Exchange
(IKE)
This type of keying automatically exchanges encryption and
authentication keys and replaces them periodically.
Block cipher
A method of encrypting text (to produce ciphertext) in which a
cryptographic key and algorithm are applied to a block of data (for
example, 64 contiguous bits) at once as a group rather than to one bit
at a time.
DES, 3DES and AES are all block ciphers.
BOOTP
Bootstrap Protocol.
A protocol that allows a network user to
automatically receive an IP address and have an operating system boot
without user interaction.
BOOTP is the basis for the more advanced
DHCP.
CA Certificate
A self-signed certification authority (CA) certificate that identifies a CA.
It is called a CA certificate because it is the certificate for the root CA.

Rate

4 / 5 based on 3 votes.

Popular SnapGear Models

Bookmark Our Site

Press Ctrl + D to add this site to your favorites!

Share
Top