Configuring Ethernet settings and routes

Article:HOWTO15599  |  Created: 2009-01-30  |  Updated: 2010-01-10  |  Article URL http://www.symantec.com/docs/HOWTO15599
Article Type
How To

Product(s)

Environment


Configuring Ethernet settings and routes

A Scanner's Ethernet settings can be customized to accommodate your site's mail-flow requirements as follows:

  • Configure a Scanner's Ethernet settings and, optionally, enable an Ethernet interface to use up to 50 static routes.

    Static routes direct data from one subnet to a different subnet faster than dynamic routes. Static routes must be updated if addresses change.

  • Add or delete virtual IP addresses to an Ethernet interface as needed.

  • Change the IP address of a Scanner.

You must have Full Administration rights or Manage Settings modify rights to modify Ethernet settings.

Table: Ethernet connection parameter descriptions lists the Scanner Ethernet options that you can configure.

Table: Ethernet connection parameter descriptions

Item

Description

Description

Provides a free-form description for the Ethernet interface.

IP address

Specifies the IP address of the Ethernet interface. You can change the IP address of a Scanner or the Control Center. If you change the IP address of the Control Center, you must subsequently log into each Scanner's command-line interface and use the agent-config command to re-allow the secured connection to the Scanner from the new Control Center IP.

See agent-config.

Netmask

Specifies which part of an IP address is the network address and which is the host address.

Broadcast

Specifies a common address that is used to direct (broadcast) a message to all terminals on a network. The broadcast address is based on the IP address and the subnet mask.

Network

Specifies an address identifying the node.

Negotiation

Check Auto Negotiation if you want Symantec Brightmail Gateway to negotiate the rate for this connection or choose the speed (10, 100, or 1000 GB per second) and duplex setting (half or full) for your high-speed Ethernet connection.

Note:
If the port you want to use is set to a specific speed and duplex setting, choose that speed and duplex setting and do not choose Auto Negotiation.

Segmentation

Check Enable TCP Segmentation Offload if you want the network interface card {NIC) to segment data for outbound transmission. This feature can reduce the load on the CPU resources that are needed to process large volumes of mail for high-bandwidth networks.

Maximum transmission unit

Works in tandem with the TCP segmentation offload.

You can enter a value from 512 bytes to 1500 bytes.

When TSO is enabled and the default maximum transmission unit is blank, the value is whatever the NIC (network interface card) specifies for its maximum value. Typically, this value is 1500 bytes maximum for an Ethernet link.

Note:
When you change this value, you must then restart the Control Center using the service controlcenter restart command.

See service.

Virtual

Allows for a virtual IP address to be defined. Depending on the interfaces you specify, up to 256 virtual networks can appear.

Enable this interface

Activate the second Ethernet interface.

Default gateway

Address of a router to handle IP traffic between networks (required). Specify an IP address.

Destination address

Computer or network destination for a static route. Specify an IP address, IP address with subnet mask, or CIDR address. Static routes direct data from one subnet to a different subnet faster than dynamic routes. Static routes must be updated if addresses change.

Gateway address

Address of a router to use for a static route. Specify an IP address.

Interface

The opening in the back of the appliance that allows for the insertion of an Ethernet cable. You can use this interface for a static route, by indicating the hostname or IP address and port that identifies the interface.


To configure Ethernet settings

  1. In the Control Center, click Administration > Hosts > Configuration.

  2. Under Hostname, check the Scanner whose Ethernet settings you want to modify and click Edit.

  3. On the Edit Host Configuration page, click the Ethernet tab.

  4. Edit the Ethernet interfaces as needed by entering an IP, netmask, broadcast, and network address for each Ethernet interface.

    Change the Scanner or Control Center IP address if needed. You can change the IP address of a Scanner or the Control Center. If you change the IP address of the Control Center, subsequently log into each Scanner's command-line interface. Use the agent-config command to re-allow the secured connection to the Scanner from the new Control Center IP.

  5. For each Ethernet NIC, check Auto Negotiation. Otherwise, select a speed for the connection, and specify half or full duplex operation of the connection.

  6. Check Segmentation to offload TCP segmentation from the gateway CPU to the Ethernet card.

  7. Check Enable this interface to activate a second Ethernet interface.

    You can dedicate a second Ethernet interface to handling inbound or outbound traffic only.

  8. Add or delete virtual IP addresses to an Ethernet interface as needed.

    See To add or delete virtual IP addresses.

    If you use this Scanner to filter IM traffic, you must configure a virtual IP address. This IP address must be routable on your organization's internal network so that IM clients inside your network can connect to it.

  9. Under Routing, in the Default gateway field, type the IP address of a default gateway.

    A default gateway is required. You must indicate it with an IP address.

  10. To optionally define a static route, under Static Routes, specify the following:

    • Destination address—IP address, IP address with subnet mask (for example, 128.113.1.0/255.255.255.0), or CIDR notation (for example, 192.30.250.00/18)

    • Gateway address—IP address

    • Interface—None, Ethernet 1, or Ethernet 2

  11. Click Add to add a static route.

    You can add up to 50 static routes per Ethernet interface.

  12. Click Save.

To add or delete virtual IP addresses

  1. Click Administration > Hosts > Configuration.

  2. Under the Hostname check the name of the Scanner whose virtual IP addresses you want to modify and click Edit.

  3. On the Edit Host Configuration page, click the Ethernet tab.

  4. To add or delete a virtual IP address to either Ethernet interface, perform one of the following tasks:

    To add a virtual address

    In the Virtual field, type the IP address and details for that virtual IP address and then click Add.

    You must have checked Enable this interface for additions to the second Ethernet interface to take effect when settings are saved.

    You can add up to 256 virtual IP addresses per Ethernet interface.

    To delete a virtual IP address

    Check the box beside the name that is associated with the virtual address and click Delete.


  5. Click Save.


Legacy ID



321886


Article URL http://www.symantec.com/docs/HOWTO15599


Terms of use for this information are found in Legal Notices