Secure Computing NETWORK INTERFACE CARDS, Webwasher WW500, Webwasher WW1100, Webwasher WW1900, Webwasher WW2900 User Manual

NETWORK INTERFACE CARDS

UPGRADE GUIDE

Webwasher

Web Gateway Security

www.securecomputing.com

e

Part Number: 86-0947553-C
All Rights Reserved, Published and Printed in Germany

©2008 Secure ComputingCorporation. This document may not, in whole or in part, be copied, photocopied,

reproduced, translated, or reduced to any electronic medium or machine-readable form w ithout prior consent
in writing f rom Secure Computing Corporati o n. Every effort has been made to ensure the accura

cy of this
manual. However, Secure Computing Corporation, makes no warranties with respect to this documentation
and disclaims any implied warranties of merchantability and fitness for a particular purpose. Secure Comput­ing Corporation shall not be liable for any error or for incidental or consequential damage

sinconnectionwith
the furnishing, performance, or use of this m anual or the examples herein. The information in this document
is subject to cha nge without notice. Webwasher, M ethodM ix, AV PreScan, Live Reporting, Cont ent Reporter,
ContentReporter, Real-Time Classifier are all trademarks or registered t rademarks o

f Secure Computing Cor­poration in Germany and/or o ther countries. Microsoft, Windows NT,Windows 2000 are reg istered trademarks
of Microsoft Corporation in th e United St ates and/or other countries. McAfee is a business unit of Network
Associates, Inc. CheckPoint, OPSEC, and FireWall-1 are trademarks or registered t

rademarks of CheckPoint
Software Technologies Ltd. or its affiliates. Sun and Solaris are trademarks or registered trademarks of Sun
Microsyste ms, Inc. in the United States and other countries. Squid is copyrighted by the University of Califor­nia, San Diego. Squid uses some code developed by others. Squi

d is Free Software, licensed under the terms
of the GNU General Public License. NetCache is a registered trademark of Network Appliances, Inc. in the
United States and other countries. Linux is a registered trademark of Linus Torvalds. O ther product names
mentioned in this guide may be trademarks or registered tra

demarks of their respective companies and are

the sole property of their respective manufacturers.

Secure Computing Corporation
Webwasher – A Secure Computing Brand

Vattmannstrasse 3, 33100 Paderborn, Germany
Phone: [phone]
Fax: [phone]

[e-mail]
www.webwasher.com
www.securecomputing.com

European Hotline

Phone: [phone]

US Hotline

Phone: [phone]

Contents

Chapter 1 Introduction ........................................................................................ 1– 1

Chapter 2 Additional Ports

................................................................................. 2– 1

Chapter 3 Upgrade Procedure

............................................................................ 3– 1

Chapter 4 Testing the Interface Numbering

........................................................ 4– 1

4.1 Interface Numbering on the WW500

.................................................. 4– 1

4.2 Interface Numbering on the WW1100

................................................. 4– 2

4.3 Interface Numbering on the WW1900

................................................ 4– 3

4.4 Interface Numbering on the WW2900

................................................ 4– 4

i

Chapter 1

Introduction

This document describes how to upgrade the network interface cards (NICs)
on a Webwasher appliance, using a special type of Gbit network interface card
with six ports on it.

You can do an upgrade with one or two cards, depending on the appliance
model, see below.

The upcoming sections provide information about the number of additional
ports that will be available after the upgrade for each of the vario

us appliance

models, see C

hapter 2.

Furthermore, the upgrade procedure is described, see C

hapter 3.

Finally, it is shown how the interface numbering was affected whe

n new net-

workinterfacecards wereinstalled on the variousappliancemodels, see C

hap-

ter 4.

1–1

Chapter 2

Additional Ports

Depending on the appliance model, you can just insert the network interface
card mentioned above in a free slot or replace one or two of the existing cards,
thus increasing the number of ports in different ways:

• WW500
The WW500 Appliance is equipped with two onboard network interfaces,

each of them providing one port.
By inserting a network interface card with six ports in a free slot, y

ou can

increase the total number of ports to eight:
2+6=8

• WW1100
The WW1100 Appliance is equipped with two onboard network interfaces,

each of them providing one port. One of these ports is a Dual Port. Fur­thermore, there is a network interface card, providing two por

ts.

You can replace the latter by a card with six ports, which increases the total
number of ports to eight:

2+(2–2+6)=8

• WW1900
The WW1900 Appliance is equipped with two onboard network interfaces

and two network interface cards, each of them pro

viding one port.

You can replace one of the network interface cards by a card with six ports,
which increases the total number of ports to nine, or replace both network
interface cards by cards with six ports

, thus increasing the total number of

ports to 14:
2+1+(1–1+6)=9
or:
2+(1–1+6)+(1–1+6)=14

2–1

Additional Ports

• WW2900
The WW2900 Appliance is equipped with two onboard network interfaces

and one additional network interface card, providing two ports.
You can insert another card with six ports in one of the two free slots that

areprovided for this purpose, which increases the number of ports to 10, or
insert a card in each of the slots, thus increasing the total number of ports
to 16:

2+2+6=10
or:
2+2+6+6=16

2–2

Chapter 3

Upgrade Procedure

To complete the upgrade procedure for the network interface cards on your
Webwasher appliance, proceed as follows:

1. Power down the appliance and unplug the power cord.

2. Open the appliance cover.

Note: As always, observe the usual ESD (Electro Static Discharge) pro-

cedures when handling network interface cards.

3. Install the network interface card or cards on the appliance. To do this,
proceed according to the appliance model in question:

• WW500
Insert the new network interface card in the free slot provided for this

purpose on the rear side of the appliance box.
The following diagram shows the rear panel of a WW500 appliance

box. On the right side of this panel, there are two free slots for in­stalling additional devices. Use the upper slot to install the additional
network interface card:

Note, however, that the slot positions m ay v

ary according to the par-

ticular version of the appliance model in question.
For a complete description of the elements on the rear side of the

WW500 Appliance, see the Rear Side

subsection of section 2.1 in

the Installation and Configuration Guide, Webwasher Appliances.

3–1

Upgrade Procedure

• WW1100
Remove the network interface card that is already installed in one of

the NIC slots on the rear side of the appliance, and insert the new
network interface card instead.

The following diagram shows the positions of these slots (9 and 10):

Note, however, that the slot positions m ay vary according to the par­ticular version of the appliance model in question.

For a complete description of the elements on the rear side of the
WW1100 Appliance, the Rear Side subsection of section 2.3 in the
Installation and Configuration G uide, Webwasher Appliances..

• WW1900

Upgrading one network interface card – Remove one of the two

network interface cards that are already installed when the appliance
is shipped, and insert the new network interface card instead.

The following diagram shows the positions of the network interface
slots (2, 6, 7, and 8) on the rear side of a WW1900 Appliance:

Note, however, that the slot positions m ay vary according to the par­ticular version of the appliance model in question.

Of the slots shown in the diagram, only the upper two (2 and 8) can
be used for removing and replacing network interface cards since the
lower slots belong to the appliance mainboard.

3–2

Upgrade Procedure

Furthermore, it is recommended that you remove and replace the net­work interface card located in the upper right slot if you just want to
exchange one card.

For a complete description of the elements on the rear side of the
WW1900 Appliance, the Rear Side subsection of section 2.4 in the
Installation and Configuration G uide, Webwasher Appliances.

Upgrading two network interface cards – Remove both network

interface cards that are already installed when the appliance is
shipped, and insert the t wo new network interface cards instead.

• WW2900

Adding one network interface card – Insert the new networkinter-

face card in one of the two free slots on the rear side of the appliance.
It is recommended that you use the upper of the two slots for this

purpose.

Adding two network interface cards – Insert a new network inter-

facecard in eachof the two free slots on the rearside of the appliance.

4. Close the appliance c over.

5. Attach a keyboard and monitor directly to the appliance.

6. Plug in the power cords for appliance and monitor.

7. Power on the appliance.

8. Boot the appliance.

9. Because the interfaces may have renumbered during the reboot, verify
your cabling and connectivity by doing the following:

a. Log into the system using the keyboard and monitor.
b. Use the ifconfig -a command to get the interface’s informa

tion.
Write down the interface name, e. g. eth0, IP address, and net­mask for each interface. Also note if the interfaces are enabled.

Note: If an interfaceis not enabled, then it may not be en

abledin the
GUI, there may not be a cable in the corresponding port, the cable
may not work, or the device at the other end may not work. Follow
standard troubleshooting techniques to resolve the

problem.

c. Verify thateach cableallows connection tothe machine thatmatches

its intended subnet and netmask. Once everything is cabled cor­rectly, ping the IP address of each neighbo

ring machine. If you re-

ceive a response, your interface configuration and cabling is correct.

d. If you do not receive a response and you have verified the other

factors listed above, then your interfac

es and your cables are not
properly matched. Swap the cables until each port connects to the
expected network.

3–3

Upgrade Procedure

The i nterface numbering on the various appliance models after installing new
cards were tested, and the results are shown in the next chapter.

3–4

Chapter 4

Testing the Interface Numbering

This chapter describes the results of a test that was performed in order to
establish the numbering of the interfaces eth0, eth1, etc. on the various ap­pliance models after one or two new six-port network interface cards had been
installed there.

4.1
Interface Numbering on the W W500

An additionalnetwork interfacecard with six ports on it, representingthe model
mentioned above, was inserted in the free slot provided for this purpose.

Before installing the additional card, the two network interfaces on this appli­ance were numbered as follows:

Onboard
interface 1

eth0

Onboard
interface 2

eth1

After installing the additional card, the interface numbering was:

Onboard
interface 1

eth6

Onboard
interface 2

eth7

Additional
card

eth5 eth4 eth3 eth2 eth1 eth0

4–1

Testing the Interface Numbering

4.2
Interface Numbering on the WW1100

The network interface card that is already installed in the additional slot on the
rear side of the appliance when it is shipped was removed.

A network interfacecard with six ports on it, representing the model mentioned
above, was inserted there instead.

Before installing the new additional card, the four network interfaces on this
appliance were numbered in the following way:

Onboard
interface 1

eth2

Onboard
interface 2

eth3

Additional
card

eth1 eth0

Afterinstalling the newadditional card, the interfacenumbering was asfollows:

Onboard
interface 1

eth6

Onboard
interface 2

eth7

New addi­tional card

eth5 eth4 eth3 eth2 eth1 eth0

4–2

Testing the Interface Numbering

4.3
Interface Numbering on the WW1900

On this model of the Webwasher appliance, two network interface cards are
already installed in slots at the rear side when the appliance is shipped.

You may either replace and upgrade one of these cards or both.

Replacing One Network Interface Card

Before installing the new card, the four network interfaces on this appliance
were numbered in the f ollowing w ay:

Two additional
cards

eth0 eth1

Onboard inter­faces 1 + 2

eth3 eth2

The new card was first used to replace the additional network interface card in
the left slot.

The interface numbering was then as follows:

Left additional
card new

eth0 eth1 eth2 eth3 eth4 eth5 eth6

Onboard inter­faces 1 + 2

eth8 eth7

Then the new card was used to replace the additional network interface card
in the right slot.

This led to the following interface numbering:

Right addition­al card new

eth6 eth0 eth1 eth2 eth3 eth4 eth5

Onboard inter­faces 1 + 2

eth8 eth7

4–3

Testing the Interface Numbering

Replacing Two Network Interface Cards

Before installing the two new cards, the four network interfaces on this appli­ance were numbered in the following way:

Two additional
cards

eth0 eth1

Onboard inter­faces 1 + 2

eth3 eth2

Then both additional cards were replaced by new cards. This led to the follow­ing interface numbering:

Both addition­al cards new

eth0 eth1 eth2 eth3 eth4 eth5 eth6 eth7 eth8 eth9 eth10 eth11

Onboard inter­faces 1 + 2

eth13 eth12

4.4
Interface Numbering on the WW2900

On this model of the Webwasher appliance, one additional network interface
cardis already installed in a slotat the rear side when the applianceis shipped.

Furthermore, there are two free slots for more additional network interface
cards. You may use these to insert either one or two cards.

Adding One Network Interface Card

Before installing the new card, the four network interfaces on this appliance
were numbered in the f ollowing w ay:

Additional
card

eth0 eth1

Onboard inter­faces 1 + 2

eth3 eth2

4–4

Testing the Interface Numbering

After inserting a new card in the upper of the two free slots, the interface num­bering was as follows:

Additional
card

eth0 eth1

Onboard inter­faces 1 + 2

eth9 eth8

New card in
upper slot

eth2 eth3 eth4 eth5 eth6 eth7

Adding Two Network Interface Cards

Before installing the two new cards, the four network interfaces on this appli­ance were numbered in the following way:

Additional
card

eth0 eth1

Onboard inter­faces 1 + 2

eth3 eth2

After inserting the two new cards in the free slots, the interface numbering was
as follows:

Additional
card

eth6 eth7

Onboard inter­faces 1 + 2

eth15 eth14

New card in
upper slot

eth8 eth9 eth10 eth11 eth12 eth13

New card in
lower slot

eth0 eth1 eth2 eth3 eth4 eth5

4–5